The Law Commission’s long-awaited proposals to modernise the Wills Act 1837 were published on 16 May 2025, marking a significant step toward reforming a law that has remained largely...
Home » Druces For Business » Corporate & Commercial » Data Privacy and GDPR
What is GDPR?
The EU General Data Protection Regulation (GDPR) came into force on 25 May 2018. The regulations aims to harmonise data protection rules and enforcement across the EU. GDPR is designed to further protect the personal data of individuals, and imposes a stricter regime than under the present law.

Our GDPR compliance services for businesses
Organisations need to be aware of their obligations under the GDPR and ensure that they are fully compliant, particularly in light of the higher penalties for infringements. Our experienced lawyers advise on a broad range of data protection issues and can assist your business in complying with the GDPR rules. We can advise on:
- data protection compliance projects, including reviewing your information handling policies and procedures, and updating privacy notices;
- negotiating contractual provisions addressing data protection and privacy;
- employment-related data matters;
- the exercise of individual data rights, including subject access requests;
- data retention issues and policies; regulatory enquiries;
- data privacy issues arising out of acquisitions and divestments;
- legality of international transfers of personal data.
Penalties for GDPR non-compliance
Though GDPR has now been in force for several years, many businesses still fail to comply with the rules, often facing tough penalties against them. Failure to comply with GDPR can result in businesses facing fines of up to 4% of global annual turnover, or €20m (whichever is greater).
Legal services for businesses suffering a data breach
Druces can also support your organisation in the event of a data breach. The financial and reputational damage to a business following a breach can be severe, and Druces will work closely with you to formulate the best approach in dealing with affected individuals and the Information Commissioner’s Office.
Who to Contact

Senior Asscociate, Corporate & Commercial
Kajal is a Senior Associate in Druces’ Corporate & Commercial team, advising on complex restructurings, M&A, fundraisings, listings, and corporate governance. Her practice spans both public and private sectors, with a focus on strategic, client-centred solutions. Kajal’s hourly rate is £310 per hour.

Consultant, Corporate & Commercial
Christopher Evans is a Consultant in Druces’ Corporate & Commercial Department. A qualified barrister and solicitor, he was called to the Bar in 1980 (Inner Temple) and became a solicitor in 1989. Between 1989 and 1991 he was head of the company/commercial department of Merriman…
How can we help?
To find out more about our services, please contact us on:
Related Services
News
Connor Martin Joins Druces’ Real Estate Team as a Commercial Property Solicitor
Druces is pleased to welcome Connor Martin to its growing Real Estate team. Connor joins Druces as a Solicitor, having qualified in 2023 and already developed a strong foundation...
Druces advises Sundae Bar Plc on AIM Admission and £2 million fundraising
Druces LLP have advised Sundae Bar Plc, an AI-driven technology company, on its successful admission to the AIM market of the London Stock Exchange and associated £2 million fundraising....