Privacy
Our Privacy team has specialist expertise in advising clients on privacy, data protection and cyber security issues. 

The privacy and data protection landscape is becoming increasingly complex.

The way businesses are now routinely gathering data, using tracking technology and undertaking data sharing and analytics is raising not only traditional privacy issues but also intellectual property and competition issues.

In addition, the global nature of business (including use of cloud services and offshore service providers) means clients often need to comply with both Australian privacy law and offshore regimes such as the European Union General Data Protection Regulation. We understand this complex legal and regulatory environment.

We advise clients on all aspects of Australian privacy law, as well as privacy requirements and codes of conduct under telecommunications, health and payments regulations.

Importantly, we understand the intersection between these regimes. We are adept at ensuring our client’s privacy framework and practises comply with applicable laws and regulations.

We are also part of a global network and so when offshore privacy advice is required, we can call upon the expertise of our overseas associates.

Data Protection & Privacy

In today's world, where business is increasingly driven by data and analytics, data protection and cybersecurity has become a fundamental priority for all organisations.

Compounded by the reliance on online platforms, increasing use of surveillance and artificial intelligence, as well as global business relations and operations, there is often a myriad of data protection and privacy regimes to take into account. There are also the industry specific requirements such as security of critical infrastructure, telecommunications, financial services, health information and the like.  

Thomson Geer has a wealth of experience and expertise in advising and assisting clients to navigate all aspects of Australian data protection and privacy laws. Whether this be at the start of a new project or technology acquisition, new product or service offering, we help clients to achieve compliance. 

When it is time to audit or review existing data protection and privacy frameworks and practices, or provide comprehensive support for a data breach, privacy complaint, or regulator enforcement action, we help to navigate these challenges with practical and commercial advice. 

We advise clients across all industry sectors on the full scale of data protection, cybersecurity and privacy matters.  We understand the differing industry norms, and the unique requirements of each of those sectors, and the need for comprehensive expert support and guidance in the event of a data breach.

Privacy Advisory


We understand the complex layers of data protection regulation, spanning numerous jurisdictions, that apply to our clients.  

We advise on the application and compliance requirements for Australian laws, and work with our associates around the world on global projects.  

Our team provides a full range of advisory services, including advising on the application and requirements of the various privacy regimes, conducting reviews and audits of existing frameworks and practices, undertaking data mapping and privacy impact assessments. 

We also advise on privacy by design and compliance with the regimes in relation to business operations, and the design of products and services. Dealing with regulators is an increasingly important privacy compliance.

Complaints and disputes

Despite all intentions, sometimes privacy related complaints, disputes and enforcement action arise. 

When they do happen, we assist through all phases of response, including advising on complaints and regulatory action, engaging and liaising with regulators, and representing clients in dispute resolution, tribunal and court proceedings.

Data breaches


Responding to and managing a cybersecurity incident or other data breach requires swift, strategic and knowledgeable action.  

These matters can be highly disruptive to an organisation, and usually require collaboration across the organisation and with external providers.  

Our team is experienced in assisting clients to manage and navigate all stages of a data breach, including incident management, liaising with insurers, cybersecurity and communications experts, providing strategic advice, engaging with regulators and affected individuals, and responding to regulatory requirements in a timely and commercial manner.

Training and support


Preparation and training are key components of any privacy framework. 

Our team is able to design and deliver training tailored specifically for your business, so that the content and examples resonate and ring true for staff. We also provide support for the day to day functions of a privacy officer, as well as broader advice and support as required.

Data commercialisation


Data sharing practices are common across industry sectors, whether it is personal information or other data, and whether when engaging a new service provider or a commercial partner. 

When doing so, ensuring appropriate contractual frameworks and security controls are in place is a must. These not only require an understanding of privacy and data protection requirements, but often intellectual property and competition issues as well. 

Our team is experienced advising and facilitating local and cross border data sharing practices, including advice, preparing and negotiating contractual arrangements, and undertaking assessments on such practices. 

EXPERIENCE
Key people

Built around principle of quality and value.

Andrew Chalet

Partner
-
Melbourne
-
Perth

Ben Coogan

Partner
-
Brisbane
-

Bronwyn Furse

Partner
-
Adelaide
-

Josh Simons

Partner
-
Adelaide
-

Mark Feetham

Partner
-
Sydney
-

Dianne Beer

Special Counsel
-
Sydney
-
Recent INSIGHts

What's new?