Cynthia’s data protection and cybersecurity practice involves advising on both worldwide and European data protection laws, particularly data use through digital and tech innovation and development. Cynthia advises on all aspects of data protection including global strategy and compliance, privacy impact assessments, privacy by design, Big Data, data commercialisation, cross-border data transfers including binding corporate rules and APEC cross border transfers, record retention and deletion. Cynthia’s cybersecurity practice covers system infrastructure and network security, governance including advising boards, administrative/organizational security, advice on forensic investigations and remediation as well as on security standards and data breach. She has also successfully represented numerous clients in investigations by several of the European national data protection authorities, each resolved without further action.

Cynthia also regularly participates in workshops hosted by policy makers, authorities and industry organisations.  For example, Cynthia was involved in the World Economic Forum’s paper on ‘Unlocking the Economic Value of Personal Data: Balancing Growth and Protection’.  She prolifically blogs on the Technology Law Dispatch and has published articles in various legal publications, magazines and has provided comment to the Global Data Review.  She also speaks regularly at conferences, such as the IAPP and the Westminster eForum and has participated in various events with the Industry and Parliament Trust.  

Cynthia also serves as a trustee for the Society of Computers & Law, is a member of the City of Law Society Data Committee and serves on the MedTech Europe data protection committee.