Data Protection

Gareth specialises in commercial litigation with a consumer focus, and data protection work is a significant part of his practice.

He has significant experience on UK GDPR and DPA issues including dealing with complex data breaches, compensation issues (mainly in multi-party litigation, but also high value individual claims) and data rectification. He has advised on issues arising from companies using data-driven business models and has provided advice to businesses on questions of data retention and interpretation of the exemptions, particularly as they impact on medical and other public bodies.

Many of the cases Gareth has been instructed in involve cross-border issues, including data sharing; the territorial scope of the GDPR; issues arising from Brexit; and jurisdiction.

Gareth is currently instructed in multi-party claims or proposed claims against Equifax, easyJet and Arnold Clark, amongst other household names.

Notable cases include:

• Collins v Ticketmaster UK Ltd [2021] 10 WLUK 560
• Neal Bennett and ors v Equifax Limited [2022] EWHC 1487 (QB)