Lorna Cropper

Lorna is a Partner sitting across both the regulatory and data and digital teams. She advises on the full spectrum of data protection and online safety matters, with particular expertise in children's privacy, AI governance, e-privacy compliance, and the management of complex data breaches. She works with clients across a range of sectors, including social media, gaming, cloud computing, transport, sports regulation, and e-commerce, helping them navigate evolving regulatory requirements through pragmatic, risk-based advice.Lorna regularly supports organisations on the intersection of data protection, online safety, and digital regulation, enabling them to develop compliant products, services, and governance frameworks while balancing commercial objectives and regulatory risk.A recognised thought leader in her field, Lorna is a frequent speaker at data protection and online safety conferences and regularly contributes to leading privacy publications. She is the author of the UK and EU law chapter in the IAPP's book Children's Privacy and Safety and is a member of the NSPCC's Children's Online Safety Taskforce.

Jurisdiction: England & Wales

• Advising clients on their ongoing data protection compliance and managing elaborate employee data subject access requests. 
• Acting as lead counsel on a multi jurisdictional data breach, assessing the risk of the incident, managing responses to data protection authorities and navigating complex notifications to affected employees. 
• Advising a range of social media and gaming clients on the interplay between the UK's Age Appropriate Design Code and the Online Safety Act as well as providing strategic market advice about online safety per se. 
• Supporting a leading mobile video game developer and publisher, working with their product team and beta testing the game to build a data protection framework to compliantly launch a game in the UK and across the EU. 
• Providing advice to clients on AI governance and AI literacy, helping organisations implement responsible AI frameworks and comply with emerging regulatory requirements.

‍