Richard Lawne

I specialise in guiding clients through the complexities of global privacy and digital regulations, ensuring their operations align with current laws and best practices. I work with a broad range of clients, from startups to multinational corporations, helping them navigate the evolving landscape of digital law.

My expertise extends across key regulations such as the General Data Protection Regulation (GDPR), ePrivacy Directive, UK Data Protection Act, California Consumer Privacy Act (CCPA), Digital Services Act (DSA), and Artificial Intelligence Act (AI Act). Beyond navigating specific legal requirements, I advise clients on the strategic aspects of digital regulation and best practices. I have particular expertise in the integration and deployment of innovative technologies, such as artificial intelligence, as well as compliance with digital safety laws.  

In my day-to-day practice, I handle a variety of privacy and regulatory issues, such as negotiating customer agreements, managing vendor relations, implementing data transfer arrangements, advising on data breach responses, and developing GDPR-compliance and comprehensive global privacy programs. I also advice on digital and offline marketing compliance, alongside other digital regulatory compliance challenges. I have extensive experience coordinating large, multi-jurisdictional projects with a European focus, delivering practical and actionable advice tailored to the unique needs of each client.

I hold dual qualifications as a lawyer in the UK and California, being admitted to the Roll of solicitors in England and Wales and the State Bar of California. Additionally, I am an active member of the International Association of Privacy Professionals (IAPP), holding certifications in European law (CIPP/E), US law (CIPP/US), and privacy management (CIPM). I also hold a Master of Studies in AI Ethics and Society from the University of Cambridge.