Winstead’s Data Privacy Practice Group assists multinational companies in their General Data Protection Regulation (GDPR) compliance efforts. 

Our proficiency in GDPR and other data privacy regulations, understanding of complex industries, and our experience in tackling projects of the size and scope of a GDPR vendor compliance initiative, allows us to effectively counsel and manage our clients’ GDPR contractual compliance programs.

Our services include analyzing our client’s relationships with vendors and business partners that involve the processing of personal data and then preparing agreements or addenda necessary to protect our client’s rights and ensure that those relationships are structured in a manner that will comply with the GDPR.  We also provide counseling on general GDPR compliance matters, cross-border data transfers, and GDPR-specific provisions in commercial agreements.  Our team can help you build and execute a strategy to bring your policies, processes, and contracts into compliance with the GDPR in a manner that is repeatable and defensible to regulators. 

Representative Experience

• Represent leading international airline in GDPR contractual compliance matters, including required contractual amendments; representation included discovery and analysis of all such contracts, preparation of amendments and data processing agreements, and negotiation of the same
• Represent leading multinational supplier of equipment to the oil and gas industry in GDPR compliance with respect to customer and employee information, preparation of data processing agreements, and negotiation of privacy provisions in customer and supplier agreements
• Represent international airline in commercial agreements involving the processing of personal information, including all required amendments for GDPR compliance
• Represent leading international airline in information technology, human resources and outsourcing services agreements involving the processing of passenger and employee personal information
• Represent international supplier of consumer loyalty services in GDPR compliance matters, including corporate compliance and counseling, development of privacy notices and terms, preparation of data processing agreements, and negotiation of privacy provisions in customer agreements