Overview
We advise Clients on the Digital Personal Data Protection Act and the wider data and technology regulatory framework: privacy notices and consent architecture, data processing and cross-border transfer arrangements, retention and deletion policies, data subject rights, and breach response and notification.
On the AI side, we help Clients put governance around adoption, use-case assessment and risk classification, model and vendor contracting, training-data and intellectual property questions, disclosure and human-oversight requirements, and internal AI use policies. We advise on both sides of the technology: for businesses deploying it, and for the platforms building it.