Our approach is holistic and risk-based, focusing strongly on commercial and customer outcomes. We provide strategic advice and long-term approaches to assist our clients to be data-driven leaders in the digital economy.
Our multi-disciplinary data strategy team provides our clients with a holistic offering that covers the legal, privacy and cyber-risk aspects of data gathering, data sharing, data linkage, digital identity and permitted access regimes.
We help remove obstacles and mitigate risks , while maintaining safety, legality and ethical conduct. This collaboration gives you access to a leading provider of Privacy Impact Assessments and privacy management strategies, as well as market-leading strategic advice and legal expertise in respect of data and privacy.
We play a key role in shaping the regulatory agenda and conversation
Our team has significant expertise in both heavily regulated datasets (such as financial, utility, telecommunication and health data) and as well as energy regulation and energy markets.
In Australia, the government’s policy on the consumer data right (CDR) was based on recommendations by Mallesons partner Scott Farrell. We have been closely involved in other major law reforms in this area, including advising one of the major digital platforms in connection with the ACCC’s Digital Platforms Inquiry.
Our services are designed to:
- Help manage risk through delivery of your critical data-related projects
- Give you a framework to proceed with an initiative in a way that ensures the integrity of your reputation
- Give you confidence to engage in new data and regulatory regimes
- Ensure the suitability and currency of your data management processes / approach
- Offer targeted solutions in line with your risk appetite and legal requirements.
Areas of data strategy we advise on are:
- Data principles
- Privacy governance plan / manual / charters
- Data asset use restrictions audit, remediation and strategy
- Data risk threshold assessment template and training
- Privacy impact assessment template and training
- Regulatory submissions
- Privacy officer / data champion role descriptions and training
- Privacy policy reviews and drafting
- AI and data playbook and training
- Data retention, deletion and de-identification Policies
- Records management policies
- Data matching framework
- Regulatory trends report.
