James Castro-Edwards | People

James Castro-Edwards provides counsel on global data protection compliance projects for multinational companies, advises on data protection issues, and helps companies respond to data breach situations. He represents a broad range of clients including financial, media and technology organisations, and medical device and pharmaceutical companies. In addition to advising clients on data protection issues, James has created innovative data protection support, audit and training programs for clients.

Earlier in his career, James was in private practice and served as a Solicitor in the data protection group at PwC Legal. He is widely published in a variety of titles, is a regular public speaker on data protection issues, and wrote the textbooks on the EU General Data Protection Regulation (GDPR) and UK General Data Protection Regulation for The Law Society. He is an IAPP Certified Information Privacy Professional (CIPP/E).

Focus Areas

Privacy, Cybersecurity & Data Strategy

Experience

Major European pharmaceutical company in managing a UK Binding Corporate Rules (BCR) application to the UK Information Commissioner’s Office. The work included advising on an interim international data transfer solution, pending UK BCR approval.
Globally-recognised jewellery brand in advising on a broad range of data protection and e-commerce matters.
European pharmaceutical provider in providing data protection support on a variety of matters including e-marketing, data processing agreements, and subject access requests.
Canadian technology company in advising on a broad range of data protection matters, including advising on a contested subject access request, which involved liaison with several European data protection authorities; responding to suspected and actual personal data breaches; advising on the data protection implications of Artificial Intelligence (AI) development; managing a global vendor project covering controller-processor agreements and international data transfers, and developing a global records retention policy.
Global pharmaceutical company in advising on data transfers in the context of international group litigation.

Cognizant in providing corporate on the data protection aspects of its proposed acquisition of Belcan, for consideration totaling approximately US$1.3 billion.
UK and U.S. managed services provider for asset managers in providing ongoing data protection support.
UK life sciences trade association in advising on the potential impact of the UK Data Protection and Digital Information Bill.