Charlotte Clayson

Trowers & Hamlins

Charlotte is a Partner in Trowers & Hamlins' Dispute Resolution and Litigation team, focusing on complex and high value commercial and public law disputes. Charlotte is also a specialist in Information Law, focusing on contentious data issues, cyber attacks and Freedom of Information issues.

Charlotte's commercial litigation experience includes the full range of contractual and commercial disputes and urgent injunctive relief, shareholder disputes, warranty and indemnity claims and sensitive investigatory work.

Charlotte has significant experience dealing with disputes in the public sector, including judicial review, planning appeals, contentious procurement, and claims for breach of statutory duties such as the Equality Act 2010 and the Care Act 2014).

Charlotte's expertise in Information Law includes preparing for data privacy breaches and cyber attacks, advising on crisis response, risk mitigation and breach investigation, notifications to and liaison with regulators, customers and stakeholders, and subsequent litigation. Charlotte also regularly advises clients on a range of complex Freedom of Information and Environmental Information issues, including making representations to the regulator and providing representation at Tribunal stage.

Contributed to

2

Cybersecurity breach notification requirements

Practice notes

This Practice Note provides an overview of the laws and regulations relating to cybersecurity—examining the entities that are required to comply with such rules, their security obligations, the notification requirements in the event of a breach, and the consequences of failing to comply. It also contains practical guidance on what it takes to be cybersecurity breach ready and managing a cyber attack.

Information Law

Cybersecurity breach notification requirements in the EU

Practice notes

This Practice Note provides an overview of the EU laws and regulations relating to cybersecurity—examining the entities that are required to comply with such rules, their security obligations, the notification requirements in the event of a breach, and the consequences of failing to comply. It also contains practical guidance on what it takes to be cybersecurity breach ready and managing a cyber attack.

EU Law