David Gourlay
PartnerDavid specialises in advising on outsourcing arrangements, IT procurement, commercial contracts, intellectual property (including brand management and protection), data protection and freedom of information compliance, cyber security and anti-bribery and corruption.
David is a member of the International Trade Marks Association and the INTA Emerging Issues Committee. He is listed in the 'WWL Thought Leaders: Data' 2023 report for Data Privacy & Protection, Data Information Technology and Data Security. He is also listed as a Global Leader in Who’s Who Legal 2023 for Data Privacy & Protection, Data Security and Information Security and in Who’s Who Legal 2022 as an expert in Trademarks.
David is ranked as a Leader in the Field for Data Protection & Information Law and Information Technology in the 2024 edition of Chambers UK Guide to the Legal Profession. He is also recommended in the 2023 WTR (World Trademark Review) 1000.
Article
UK Government Publishes Cyber Governance Code of Practice: A Focus for Directors and Boards
According to the Cyber Security Breaches Survey 2024, 50% of businesses and 66% of high-income charities experienced cyber security breaches or attacks last year, with those figures even higher for large and medium-sized businesses. To help manage cyber security risks, the Department for Science, Innovation and Technology has published the Cyber Governance Code of Practice.
Article
A Wake-Up Call for Data Processors: ICO Issues £3M Fine
In a landmark decision, the Information Commissioner’s Office has issued a £3.07 million fine to the Advanced Computer Software Group, following a ransomware attack in 2022. This penalty marks a significant shift in the ICO’s approach to data protection enforcement, as it is the first time the ICO has fined a data processor rather than a data controller.
Article
Ransomware: Time for a change of approach?
The Home Office of the UK Government recently began a consultation on proposals to change the rules on how to respond to ransomware attacks. The consultation should serve as an important prompt for organisations to ensure they understand how to handle ransomware attacks.