The impact that the deployment of information technologies has on companies, public administrations and public-sector entities calls for specialised preventive legal advice that provides technical and legal certainty for implementation and development processes. Our Digital Law, IT and data protection department specialises in advising companies and organisations, both public and private, in all of the areas of expertise listed, offering legal solutions tailored to the current technological landscape and to each client’s specific profile.

To this end, we support our clients in ensuring compliance with the General Data Protection Regulation (GDPR), Spain’s Organic Law on Data Protection and the Safeguarding of Digital Rights (LOPDGDD), the Artificial Intelligence Regulation (AIA) where AI systems are used; as well as other specific regulatory frameworks such as information society services rules, service-provider regulations, the DORA Regulation, the NIS2 Directive or the Data Act and other relevant rules on new technologies, digital transformation and the protection of confidential information and trade secrets.

Our services include, by way of example, answering queries, drafting reports and legal notes, due diligence, designing internal policies, drafting and reviewing contracts, acting as outsourced Data Protection Officer (DPO), legal support for in-house DPOs, representation before supervisory authorities and court defence, online marketing, image protection, training plans, impact assessments, response to security incidents and breaches, response to identity-theft incidents on web platforms and account recovery, audits and risk management to minimise potential sanctions and protect corporate reputation.

We also advise on the review and drafting of technology contracts and terms and conditions related to the development of applications and digital platforms, outsourcing agreements, cloud computing service contracts, e-commerce, software licence agreements, maintenance contracts, SLAs (service-level agreements), software protection, and the assignment and transfer of technology and databases containing personal data. We also provide advice on incorporating appropriate data protection and cybersecurity provisions into technology contracts for the business use and commercialisation of our clients’ tech solutions.

Our main goal is to ensure that our clients have the right tools to operate in digital environments with full confidence, balancing business development and regulatory compliance, with particular attention to the protection of personal data and confidential information.