Georgina Graham

Georgina is an experienced data and technology lawyer, specialising in data protection and privacy, exploitation of data, intellectual property rights in data, digital regulation and technology transactions.
Georgina advises clients on a full range of data-related issues, with a particular focus on data protection and privacy compliance. She also supports our data litigation team, providing technical advice on complaints, civil claims and regulatory investigations relating to alleged breaches of data protection and privacy laws.
Outside of data protection and privacy, Georgina advises on, drafts and negotiates software, technology and licensing arrangements, and the protection and exploitation of data and intellectual property rights in that context.
Georgina provides practical, focussed advice to businesses in a range of sectors, particularly in the Technology, Media and Communications, Retail, and Energy sectors. A lot of her work involves advising international telecoms businesses, broadcasters and digital media providers, social media platforms, retailers, energy companies and large house builders.
Transformation: Data is the raw ingredient for digital transformation; businesses across all sectors are collecting, using, sharing and exploiting data in ways that they may not have done previously. Osborne Clarke was recently named by Global Data Review as one of the world's top 20 data law firms, and as part of that team, I support businesses to maximise the value of data in a legally compliant, strategic and commercial way.
Culture: As the co-chair of our OC Gender network, I seek to provide opportunities and a voice to everyone, no matter their gender. My particular focus – in the legal profession and more broadly – is championing female progression and challenging the social norms about parental care and responsibility, and the interaction between family and work life.
Providing strategic advice on data protection and advertising issues.
Advising on a full range of data protection and e-privacy issues; including on the collection and use of children's data, and the use of data for advertising and marketing purposes.
Advising on, and assessing cross-border data transfers from the UK and the EU.
Five things to know about the evolving concept of joint controllership in data protection and what it means in practice
Businesses will welcome draft decisions that follow months of discussions to continue free EU-UK data flows
Broadly applicable ICO code presents a significant practical challenge to online services and is unlikely to be just 'one of...
UK data protection regulator's draft fines regime looks to weigh up the ability to pay proposed penalties, any undue financial...
The ICO has written to businesses setting out what support they can expect in relation to data protection and freedom...
Surprise CJEU judgment leaves intact standard contractual clauses but invalidates EU-US Privacy Shield and forces businesses and regulators to work...
Medical monitoring and testing plays a vital role in combatting Covid-19, but it is important to remain compliant with privacy...
Businesses in all sectors are focusing more than ever on how they can digitise and enhance their interactions with customers...