Garrigues‘ data protection, privacy, cyber security, and technology practice has a robust offering which covers regulatory compliance, the application of cyber security legislation, as well as privacy litigation. The team’s breadth of expertise and cross-border capabilities continue to attract new clients, particularly from the financial services, pharmaceuticals, and clean energy industry sectors. Heading up the group is Alejandro Padín who specialises in cyber attacks, privacy litigation, and advisory matters, while other key members of the team include Álvaro Blanco, both of whom have extensive experience advising on privacy matters, with a focus on the IT sector.

The information technology, media, and data protection team at Hogan Lovells Spain, led by Gonzalo F. Gállego, is capable of handling a wide range of data privacy and data protection matters including data transfers, privacy litigation, and privacy contracts. Gállego stands out for his expertise in AI, security and data breaches, and GDPR compliance, while Santiago De Ampuero Castellanos concentrates on data protection litigation, sanctioning proceedings, and policy development. Juan Ramón Robles focuses on the design and implementation of data protection policies in the e-commerce space, while Clara Lázaro is adept at handling cyber security, AI, and ISS matters.

With an expanding client roster spanning the energy, pharmaceuticals, and TMT sectors, Baker McKenzie stands out for its wide scope of expertise and cross-border capabilities. The team is adept at handling regulatory compliance matters, privacy issues, as well as data protection breaches and investigations. Cristina Duch co-leads the practice alongside media and technology expert José María Méndez, while other notable names in the department include Patricia Pérez, Pablo Uslé, and David Molina, all of whom are experienced in regulatory proceedings and compliance.

With strength in the technology, financial services, and pharmaceuticals sectors, the data protection department at Bird & Bird assists with cyber security, privacy, and information security matters, including IT contracts, GDPR compliance, and litigation. The team’s scope of practice, alongside its cross-border capabilities continue to attract notable clients to its roster, including household names such as Adidas. Heading up the group is Joaquin Muñoz who concentrates on data protection compliance, information security, and IT outsourcing. Paula Garralón and Jaime Delgado stand out for their aptitude in handling e-commerce matters and data projects, while Elena Recla focuses on blockchain and AI matters.

With expertise in handling security breaches, CMS Albiñana y Suárez de Lezo‘s data protection team is instructed by a range of high-profile clients from the banking and finance, luxury and fashion, and e-commerce sectors, including Caixabank, LOEWE, and Amazon. Javier Torre de Silva heads up the practice and concentrates on technology, media, and communications, with a particular focus on litigation and regulatory matters. The group also benefits from the experience of José Luis Piñar, who formally served as the director of the Spanish Data Protection Agency.

With expertise in regulatory compliance, contentious-administrative proceedings, and crisis management, the data privacy and data protection practice at ECIJA stands out for its breadth of capabilities both domestically and internationally. The group’s extensive client roster continues to expand with notable names from a variety of industry sectors, including banking and finance, healthcare, and energy. The main contacts in the department include IT expert Alejandro Touriño, compliance and regulatory specialist Teresa Pereyra, and TMT authority Daniel López. Other notable practitioners include Jesús Yáñez and Jesús Rubí, both of whom have a wealth of experience handling privacy matters.

Ramón y Cajal Abogados‘ privacy and data protection group has a robust offering which includes assistance with cyber security, information security, and IT contracts. The team is also a key port of call for IT, financial services, as well as media and entertainment clients, while the ‘excellent’ Norman Heckh leads the practice and is noted for his expertise in handling data protection, information security, and cyber security. María Luisa González is another key practitioner and concentrates on privacy, compliance, and data security.

With a robust offering covering data protection implementations, privacy, and cyber security matters, Uría Menéndez‘ counts businesses from the technology, media and entertainment, and automotive sectors on its client roster. Heading up the team is Leticia Lopez-Lapuente, who specialises in e-commerce personal data protection, and also has experience representing clients before the Spanish Data Protection Agency in data privacy and protection proceedings. Other notable names in the department include Pablo González-Espejo and Borja Sainz de Aja, both of whom are adept at handling outsourcing matters.

Andersen’s privacy, IT, and digital business group has extensive experience handling technology projects involving international data flows, GDPR compliance, and data governance. Isabel Martínez Moriel heads the practice and is noted for her breadth of expertise, which include representing clients before the Spanish Data Protection Agency and international data transfers.

The data protection practice at Audens has a robust offering which covers database transfers during M&A transactions, regulatory audits, compliance, and consultancy. Co-heading the department are Marcos Mª Judel Meléndrez and José Leandro Núñez García; Meléndrez concentrates on data protection audits, litigation, and consultancy, while García specialises in telecoms and IT matters.

A key port of call for media and entertainment, technology, and automotive clients, the data protection practice at Cuatrecasas is geared to handle regulatory compliance, security breaches, and impact assessments. Alejandro Negro concentrates on investigations, enforcement actions, and litigation, co-leading the department with Albert Agustinoy, who is adept at data protection compliance, cyber security, and data breaches.

Noted for its ability to ‘understand client needs, difficulties, and constraints and adapt to them easily,’ Pérez-Llorca is a strong choice for compliance, data protection audits, and court proceedings relating to data ownership and liabilities. Technology and entertainment expert Andy Ramos Gil De La Haza and information security specialist Raúl Rubio co-head the department.

A key contact for energy, financial services, and TMT clients, the data protection team at Clifford Chance specialises in representing clients in both contentious and contentious-administrative proceedings. Leading the practice is Fernando Irurzun who is well-versed in data protection and privacy disputes, while GDPR specialist Manel Santilari is another key practitioner.

The data privacy and data protection group at Gómez-Acebo & Pombo has experience advising on cyber security, data disclosure agreements, and data breaches, as well as audits and due diligence. With cross-border capabilities and involvement in emerging areas such as NFTs and the Metaverse, the team is a key contact for technology and insurance clients. Technology and software specialist Isabela Crespo co-heads the practice alongside e-commerce expert Bárbara Sainz De Vicuña.

Osborne Clarke‘s information technology department has a robust offering which covers privacy issues, regulatory compliance, and cyber attacks. The practice, which is also skilled at data protection policies, procedures, and agreements is a key port of call for e-commerce and retail clients. Rafael García Del Poyo leads the group and has experience handling litigation related to data protection, while on the regulatory front, Roger Segarra is a key contact.

With expertise in data protection assessments, sanction proceedings, and data governance, the data protection group at PwC Tax & Legal Services is a key port of call for technology, retail, and energy clients. Fernando Fernandez-Miranda heads up the practice and stands out for his breadth of practice, which covers e-commerce, technology contracting, and intangible assets.

With experience assisting on AEPD matters, cyber attacks, and regulatory compliance, Squire Patton Boggs‘ data protection, cyber security, and digital assets practice is regularly instructed by clients from the IT, entertainment, and automotive sectors. Bartolome Martin heads up the team and stands out for his expertise in GDPR regulations, e-commerce, and international data transfer agreements, while on the AI regulation front, Claire Murphy is the main contact in the group.