Skip to main content

Loretta Maxfield

Partner | Dundee

GDPR, Intellectual Property

Dual qualified in Scots and English law

A Partner in our IP, Data Protection and Information Governance Team, Loretta is qualified in both Scots and English law and has over 12 years post-qualified experience.  Loretta is recognised by Legal500 as a Recommended Lawyer in Education, Intellectual Property (including  data protection and FOI), and IT & Telecoms sectors. She is experienced with advising and managing relationships with a range of clients from individuals, small start-ups, public bodies, large educational institutions to large multinational companies (turning over in excess of £800M). Loretta has enjoyed being seconded to several organisations including one of the UK's top companies for online innovation and separately, one of the UK's top research institutions. She also enjoyed a nine month secondment to the Business Development Office of a leading University, where she assisted the University by way of contract management with a view to maximising its intellectual property portfolio through various mediums including research contracts, collaborations and governance.

Loretta’s key area of expertise is in relation to data protection and freedom of information including the General Data Protection Regulation (GDPR), Data Protection Act 2018, e-Privacy Regulation and Freedom of Information (Scotland) Act 2002.    In particular, Loretta has assisted many organisation prepare for and continue to comply with GDPR and related data protection and information governance legislation and also leads our outsourced Data Protection Officer service.  This experience includes advising on mitigating risk when handling personal data, marketing, delivering audits, liaising with key stakeholders and management, preparing and monitoring implementation of improvement plans, delivering training, drafting privacy related documentation, advising on projects involving personal data, assisting with data security breaches, reporting to and attending board meetings, handling complex data requests, advising on complex data sharing arrangements, liaising with the Information Commissioner and undertaking Privacy Impact Assessments.


Legal 500 2020

Loretta Maxfield's Blog Entries

Staying Connected in a Virtual Office.

Following the announcement on the 24th March that the UK was going into ‘lock-down’, most businesses had to flip their operating…

Posted on 28th July 2020

European Court decision in Schrems II case could create compliance nightmare for EU organisations

Standard Contractual Clauses remain valid but EU-US Privacy Shield struck down On Thursday 16 July, the Court of Justice of the European…

Posted on 17th July 2020

Morrisons Wins Supreme Court Ruling Over Data Breach

Last week the Supreme Court overturned the judgements of the High Court and the Court of Appeal in a case involving the unauthorised…

Posted on 7th April 2020

Contact Loretta Maxfield

How would you prefer us to contact you?