James Quartermaine

With over 15 years of experience working in contentious privacy, defamation and media law (in private practice, and in-house), over recent years, James’s practice has had a particular focus on data privacy law, advising clients on a range of contentious and non-contentious data issues. These range from the development and implementation of effective, risk-based data privacy programmes, through to ad-hoc advice on specific data processing scenarios, and strategic and practical guidance when things go wrong.

James holds Certified Information Privacy Professional Europe (CIPP/E) and Certified Information Privacy Manager (CIPM) credential from the International Association of Privacy Professionals.

Key areas of James’s data privacy practice include:

• Providing practical and strategic advice on preventing and responding to cyber-incidents and other data breaches including how to engage with the ICO and other relevant regulators.
• Bringing and resisting legal and regulatory complaints arising from data breaches.
• Advising clients on the development and implementation of effective data protection policies and procedures
• Advising clients on major GDPR and PECR compliance projects (including data mapping, DPIAs, contractual and supplier arrangements, policies and privacy notices, subject rights, data sharing and international data transfers.
• Responding to data subject access requests (often in contentious circumstances).
• Advising on a range of data protection issues in the context of M & A transactions.
• Advising clients on their use of electronic direct marketing and cookies.

Providing sector specific GDPR compliance training for clients.

Qualifications and Experience

• Qualified as a solicitor in 2003

Professional Memberships

• Member of the International Association of Privacy Professionals.