Charlie Morgan

This Practice Note considers the UK and EU General Data Protection Regulation (GDPR) regimes, the Data Protection Act 2018 (DPA 2018) and other data protection considerations that should or may be considered in connection with international arbitration proceedings. In the context of arbitration proceedings it provides UK focused guidance on: the background to the GDPR regimes and DPA 2018, the scope and territorial reach of the GDPR, key definitions such as personal data, processing and identifying controllers and processors, data protection principles including: the possible lawful grounds for processing in arbitration (such as consent, compliance with a legal obligation, legitimate interests), fairness and transparency, data minimisation, storage limitation (or data retention), integrity and confidentiality and accountability, as well as exemptions to the GDPR regimes. The Practice Note also takes into account article 29 Working Party and ICO guidance and looks at data subjects’ rights, data mapping, data protection impact assessments, redaction, pseudonymisation and anonymisation, client compliance, transfer of data out, extra territorial reach and sanctions for breach of the GDPR regimes.

This Practice Note considers the issue of cybersecurity (cyber-security or cyber security) in international arbitration proceedings. The Practice Note provides an introduction to cybercrime (cyber-crime or cyber crime) (eg hacking) and cybersecurity in arbitral proceedings, considers the importance of cybersecurity in arbitral proceedings, the potential targets of cyberattacks (cyber-attacks or cyber attacks) in arbitration, the perpetrators of cyberattacks in arbitration (and cyber threats, cyber-threats) and the potential consequences of cyberattacks in arbitration. The Practice Note also considers where the responsibility lies for dealing with (managing, providing for, taking account of) cybersecurity in international arbitration as well as the steps (procedures and processes) that may be appropriate to take to combat cyberattacks (increase cybersecurity) in arbitration proceedings. The Practice Note also considers some of the developments in this field of practice, including draft and final protocols on cybersecurity in international arbitration.