Alison Llewellyn

Managing associate

Alison has considerable experience advising clients on data protection matters including responding to subject access requests, carrying out direct marketing and analysing data protection in the context of commercial and corporate transactions. She provides data privacy assistance to clients including financial institutions and life sciences companies. Alison also advises clients on a range of commercial matters, and gained valuable commercial experience during her in-house secondments, including to an insurance intermediary and a pharmaceutical diagnostics company.

Alison has supported a number of clients on extensive GDPR-compliance projects as well as DIFC-based clients on the steps required for compliance with the DIFC Data Protection Law No.5 of 2020. Alison has delivered training for the Dubai International Finance Centre (DIFC) Academy of Law on the GDPR and the 2007 DPL and contributed data protection commentary to the Laws of the DIFC Vol 2, for which she was named an 'Academy of Law Specialist in DIFC Data Protection Law'. Alison is a member of the International Association of Privacy Professionals (CIPP/E certified)

  • Assisted a bank with its gap analysis of banking terms and fair processing notices, and advising them on the GDPR and the implications of its entry into force.
  • Advised on a significant GDPR-remediation project for a pensions administrator.
  • Provided strategic advice to numerous clients across a wide variety of sectors in relation to DSARs.
  • Provided advice to an accounting firm in relation to handling subject access requests in the context of insolvency and restructuring processes.
  • Provided analysis and advice to a global software company on GDPR considerations in the context of a number of acquisitions and investments in technology companies operating in the healthcare sector.
  • Supported a DIFC-based client with their substantial DIFC Data Protection Law No.5 of 2020 compliance project.