Stephenson Harwood LLP

Stephenson Harwood is an international law firm, and we're committed to creating 'positive partnerships' with our clients. We represent listed and private companies, institutions and individuals, building lasting relationships to help them succeed in a complex and ever-changing world. Our focus is on five core sectors: Energy Transition and Infrastructure, Life Sciences and Healthcare, Private Capital and Funds, Technology, and Transportation and Trade. With more than 1,500 people, including 250+ partners, across 11 offices in Europe, the Middle East and Asia, we combine deep legal capabilities and broad commercial expertise. We have also forged close ties with high-quality law firms around the world, blending local knowledge with global savvy for clients in over 100 countries. Katie Hewson leads the firm’s international data protection practice. Clients come to Katie for her skill at helping them make use of their valuable data in a responsible way. She has significant experience advising international clients on digital transactions, innovative advisory projects, investigations, complaints and incidents, across data-rich sectors including tech, financial services, pensions, transport, art and cultural property and life sciences. Katie's clients benefit from her ability to provide clear, actionable advice on EU and UK GDPR compliance, the EU AI Act and AI governance, EU digital legislation, data contracts, overseas data transfers, data breach handling, data subject rights requests, direct marketing and cookies. Katie holds IAPP AI Governance Professional, Fellow of Information Privacy, CIPP/E and CIPM accreditations. In addition to being a Solicitor in England and Wales, Katie is registered as an Avocat Communautaire with the Paris Bar, which supports her advice on EU data laws. Known for her pragmatic, personal and dedicated approach, Katie is a trusted partner for organisations seeking to maximise value from their data assets and address regulatory challenges with confidence. She has successfully guided international banks, wellbeing chains, art market participants and major technology companies through complex transactions, investigations and enforcement actions, delivering favourable outcomes in high-stakes situations.

Representatives

Katie Hewson

partner

Contact

Publications

• UK Data Reform: Striking the Balance Between Adequacy and InnovationThe UK Government has brought forward a new Bill that proposes several changes to UK data protection law, alongside other provisions intended to broaden use and commercialisation of data for economic and societal benefit. The Bill, introduced into the House of Lords on 23 October 2024, bears similarities to the previous Government's proposed reforms, but includes safeguards that are in part aimed at ensuring the UK will retain its adequacy arrangements with the EU.19 December 2024
• Another new direction: UK reintroduces the Data Protection and Digital Information Bill, but what's changed?On 8 March 2023, the Department for Science, Innovation and Technology ("DSIT") introduced the Data Protection and Digital Information (No. 2) Bill (the "Bill"), extinguishing the previous Data Protection and Digital Information Bill (the "Previous Bill"). The Bill is set to be "…a simple, clear and business-friendly framework…" that will minimize the bureaucracy associated with "…the barrier-based European GDPR…".13 July 2023
• UK ICO's new approach to publishing details of complaints, breach reports and reprimandsThe UK Information Commissioner's Office (ICO) has started routinely publishing information about complaints made against organisations by members of the public, self-reported data breaches and reprimands issued by the ICO. Those subject to UK GDPR should be aware of the detailed information that this new approach will make available to counterparties, competitors and the public.24 January 2023
• A New Direction for UK Data Protection Law: the Data Protection and Digital Information BillThe UK government’s Department for Digital, Culture, Media & Sport ("DCMS") has published proposed legislation that will make extensive amendments to the UK’s data protection laws if enacted. The Data Protection and Digital Information Bill (the "Bill") was introduced to Parliament on 18 July 2022 and largely follows the plans announced on 23 June 2022 in the government's response to the consultation Data: a New Direction.29 August 2022