Peter Church
Peter is an experienced technology lawyer. He originally studied Computer Science at Cambridge and has nearly 25 years’ experience advising clients on the challenges raised by new technology. He is recognised as an expert in technology regulation in Chambers & Partners, and in the data section of Who’s Who Legal. Clients say “he is very good” (Chambers 2026).
Work highlights including advising on the interaction between AI and the GDPR for a variety of large technology companies, including responding to regulatory investigations and enforcement by regulators from across the EU and UK.
He has also worked for a number of large tech companies on a variety of significant UK and Irish regulatory investigations into issues such as ad personalisation, international transfers and subject access rights.
He was seconded to the Information Commissioner’s Office to work in the Technology Policy team on Adtech and AI, and as part of the response to the COVID-19 pandemic.
He led the high-profile audit into the Royal Free’s use of an App developed by DeepMind, part of the Google group of companies and advising on the related representative class action (Prismall v Google).
Practice Area
Panel
- Contributing Author
Year Taken Silk
- 2001
Experience
- Linklaters (1999 - Present)
- Information Commissioner (secondment) (2019 - 2020)
- British Telecom (secondment) (2014 - 2014)
Qualifications
- Computer Science (1996)
- PGDL/LPC (1998)
Education
- Cambridge (1993-1996)
- Nottingham Law School (1996-1998)
1 Contributions by Peter Church
PRECEDENTS
Precedent: Letter to affected individuals notifying personal data breach under the Privacy and Electronic Communications (EC Directive) Regulations 2003 (SI 2003/2426)
Letter notifying data subject of data breach under the Privacy and Electronic Communications (EC Directive) Regulations 2003, SI 2003/2426
[ Data subject’s name and address ]
[ Date ]
Dear [ insert name ],
Notification of data breach
On [ insert date ] we identified that [ what has occurred, ie a personal data breach (including whether an unauthorised third party was involved) ]. [ We believe that the OR The ] incident is understood to have taken place on [ insert date ]. Our enquiries [ to date ] indicate that the data [ was accessed by an unauthorised person OR was disclosed without authorisation OR was stolen OR was lost OR was destroyed OR was altered ] [ may have ] comprised personal information, for example [ describe the data and, if possible, confirm whether you consider the recipient’s data to have been affected, eg the names and addresses ]...
Information Law
If you expected to see yourself on this page, click here.
