Partner
Katie is a leading data protection expert, guiding clients through complex challenges and opportunities in their use of data and artificial intelligence with clarity and confidence.
Language - English
Jurisdiction - England & Wales, Republic of Ireland, Avocat Communautaire (Paris Bar)
Katie Hewson leads the firm’s international data protection practice. Clients come to Katie for her skill at helping them make use of their valuable data in a responsible way. She has significant experience advising international clients on digital transactions, innovative advisory projects, investigations, complaints and incidents, across data-rich sectors including tech, financial services, pensions, transport, art and cultural property and life sciences.
Katie's clients benefit from her ability to provide clear, actionable advice on EU and UK GDPR compliance, the EU AI Act and AI governance, EU digital legislation, data contracts, overseas data transfers, data breach handling, data subject rights requests, direct marketing and cookies. Katie holds IAPP AI Governance Professional, Fellow of Information Privacy, CIPP/E and CIPM accreditations. In addition to being a Solicitor in England and Wales, Katie is registered as an Avocat Communautaire with the Paris Bar, which supports her advice on EU data laws.
Known for her pragmatic, personal and dedicated approach, Katie is a trusted partner for organisations seeking to maximise value from their data assets and address regulatory challenges with confidence. She has successfully guided international banks, wellbeing chains, art market participants and major technology companies through complex transactions, investigations and enforcement actions, delivering favourable outcomes in high-stakes situations.
UK’s First Approved UK GDPR Code of Conduct
Advised the Association of British Investigators.Leading airline biometrics advice
Successful defence of regulatory investigation into client's deployment of biometric facial recognition technology.S&P Global
Advised on the acquisition of TeraHelix, an AI-enabled data linking fintech firm.AI-generated social media
Advised a leading food & beverage company on the data privacy aspects of an AI-generated social media marketing campaign.Arts sector transactions
Successfully resolved a cyber incident resulting in diversion of payments in transactions for major artworks.Financial services client
Advised on data monetisation and AI model training using customer data.Transportation sector EU data breach
Identification of, and liaison with, EU lead supervisory authority following a cross border personal data breach.