Image of Richard Cumbley

Richard Cumbley

TMT Partner, London / Dublin

“I have advised on technology-related issues for more than 20 years, with a particular focus on information governance and data privacy. I aim to provide clients with clear, decisive, time-sensitive advice that assists them to take business-critical decisions.”

Overview

Professional experience

Education and qualifications

Overview

Richard advises multinationals and governments on complex information management and data privacy issues. He has worked on data related projects across the globe, including major data security incidents, large-scale privacy litigation, appearances before regulators, contentious and large-scale subject access issues, online monitoring techniques, government access programs, data localisation and “big data”.
 
Richard also counsels clients on the implications of new technology such as 3D printing, blockchain technology, interactive TV and IOT.
 
In addition, Richard advises on complex technology contracts, including large scale outsourcing, cloud services, technology development and related services contracts in both contentious and non-contentious environments.
 
Based in London and Dublin, Richard has advised on IT, data protection, information governance and outsourcing deals in more than half of the firm’s offices around the world. He also works closely with the firm’s leading Corporate lawyers on technology and separation issues associated with corporate transactions. He is ranked by both Legal 500 and Chambers as in the first tier of UK privacy and data lawyers.
 
Work highlights
Richard has worked with key clients on a wide range of privacy, data protection, new technology and outsourcing transactions. These include advising:
 
  • The UNHCR, the UN refugee agency, on a scheme to provide emergency cash aid to 5,000 displaced Ukrainians using a dollar-equivalent cryptocurrency. Refugees were able to exchange the funds for cash via a digital wallet on their smartphones. The work involved contracts to ensure the tech was secure and that anti-money laundering and anti-terrorist financing protocols were followed. This transaction was highly commended in the FT’s Innovative Lawyer Awards 2023.
  • News International on aspects of the fallout from the telephone hacking proceedings and inquiries
  • BT on its transparency report, describing its relationship with governments globally
  • Adecco, AstraZeneca, BlackRock, Deloitte, KPMG, Hyatt Hotels, Sainsbury’s, the administrators of Lehman Brothers, UBS and Walt Disney on domestic and international data protection and information governance projects, including the implementation of GDPR compliance programs and binding corporate/processor rules
  • Stratasys on its ground-breaking deal with Airbus to 3D print aircraft parts for the A350 XWB aircraft
  • a consortium of global banks on the development and roll out of blockchain technology for use as a utility settlement coin
  • Thomson Reuters on the launch of its Org ID product, a managed service that collects, classifies and verifies client identity
  • Numerous technology services and outsourcing deals, including Sainsbury’s on its application maintenance and support services contract with Tata Consulting and BP on its US$400m global hosting arrangements with Hewlett-Packard
  • Exterion Media (formerly known as Viacom Outdoor) on its contract with Transport for London (TfL) for outsourced outdoor advertising on the London Underground, the largest outdoor advertising contract in the world
  • The Royal Free Hospital on the UK Information Commissioner’s investigation into, and audit of, the use of Google DeepMind’s artificial intelligence technology
  • The separation and transitional arrangements necessary for the sale of RBS businesses in Asia and the Middle East, the proposed acquisition of Asda by Sainsbury’s, the acquisition of Rolls-Royce’s energy gas turbine and compressor business by Siemens and numerous other corporate transactions

Professional experience

Richard is a member of the International Chamber of Commerce’s technology committee and of the privacy working group of techUK, which represents nearly 1,000 UK technology companies.
 
Richard writes on a variety of topics of significance to the sector, including the “right to be forgotten”, cyber security, social media and data protection.
 
Richard also regularly speaks at conferences around the world including:
 
  • Privacy Laws and Business, Cambridge University
  • International Association of Privacy Professionals (IAPP) conferences in London, Brussels and Washington D.C.
  • IT Law Summer School, Cambridge University, where he has lectured for 10 years on the subject of outsourcing law

Education and qualifications

Richard has a Masters Degree from Merton College, Oxford University and holds a diploma in IP law from the University of Bristol.