Sarah Pearce is a partner in the firm’s Data Protection, Privacy, and Security and Technology Transactions and Sourcing practice groups. Sarah is an experienced cyber, privacy and data security lawyer focused on regulatory compliance, incident response, and AI. Sarah advises multinational organizations on global data privacy regimes (including, in particular those in the UK and EU), cyber security risks and incident response, regulatory investigations and data governance. She assists clients in identifying, evaluating and managing global privacy and information security risks and has extensive experience supporting data strategies and compliance programs, including international data transfers, marketing-related issues, and risk management associated with the collection and use of data. Sarah has managed multiple high-profile, international security incidents and regularly advises clients on cybersecurity incident preparedness activities, regulatory investigations and enforcement proceedings.
Sarah assists clients in identifying, evaluating and managing global privacy and information security risks and compliance issues. Sarah is well versed in the latest EU cyber and data regulatory frameworks, advising clients on NIS2, DORA the Cyber Resilience Act and the EU AI Act. With a background in commercial contracts, Sarah routinely advises clients on the privacy and data security provisions of complex commercial and technology-related contracts, as well as those arising in the context of corporate transactions.
Sarah is a frequent author and speaker at international conferences on related privacy, cybersecurity and AI issues.
