Bridget Treacy

Bridget Treacy is a partner at Hunton Andrews Kurth. Her practice focuses on all aspects of privacy, data protection, information governance and e-commerce issues for multinational companies across a broad range of industry sectors. She advises clients on the EU General Data Protection Regulation that is transforming Europe’s privacy landscape. Other key experience includes big data and analytics, cloud computing, cross-border data transfers and BCRs, behavioural targeting and data breach. She has structured and implemented global privacy and data management compliance programs. Bridget is one of the few UK lawyers with deep, practical experience of advising on EU data protection, cybersecurity and data breach issues. She also has wide-ranging experience advising on outsourcing agreements, strategic alliances, shared services arrangements and technology licensing. She is the editor of the specialist privacy journal “Privacy and Data Protection”, and has contributed to a number of published texts.

Practice Areas

Panel

  • Contributing Author

Qualified Year

  • 1997

Membership

  • Member, European Advisory Board, International Association of Privacy Professionals
  • Member, Society for Computers and Law
  • Member, Women in Banking and Finance

Education

  • BCom, LLB (Hons), University of Canterbury, New Zealand, 1990

1 Contributions by Bridget Treacy

UK GDPR territorial scope: establishment, goods or services and monitoring tests; enforcement and UK representative requirements
PRACTICE NOTES
UK GDPR territorial scope: establishment, goods or services and monitoring tests; enforcement and UK representative requirements
This Practice Note explores the territorial reach of the regime set by the United Kingdom General Data Protection Regulation (UK GDPR), the Assimilated Regulation (EU) 2016/679. It also outlines when a UK representative must be designated. For high-level introductions to UK data protection, see Practice Notes: Data protection law—new starter guide and The UK General Data Protection Regulation (UK GDPR). The UK data protection law collection assembles further general guidance on the UK GDPR framework and is a recommended place to begin research. In brief In outline, and subject to certain limited exceptions, the UK GDPR may apply to: processing of personal data undertaken in connection with the activities of a controller’s or processor’s establishment in the UK, irrespective of whether the processing itself occurs inside or outside the UK processing personal data of data subjects in the UK by a controller or processor with no UK establishment, where the processing is linked to: offering goods or services to such data subjects in the UK (whether or not payment by the data subject is required), or monitoring their behaviour...
Information Law
Expert page AD
If you expected to see yourself on this page, click here.