Eduardo Ustaran | London | Hogan Lovells

Eduardo Ustaran

Partner Global Regulatory


English, Spanish

Ustaran Eduardo

Eduardo Ustaran
Ustaran Eduardo
  • Overview
  • Experience
  • Credentials
  • Insights and events

Global co-head of the Hogan Lovells Privacy and Cybersecurity practice Eduardo Ustaran is widely recognized as one of the world's leading privacy and data protection lawyers and thought leaders. With over 25 years of experience, Eduardo advises multinationals and governments around the world on the adoption of privacy and cybersecurity strategies and policies. Eduardo has been involved in the development of the EU data protection framework and was listed by Politico as the most prepared individual in its 'GDPR power matrix'.

Based in London, Eduardo leads a highly dedicated team advising on all aspects of data protection law – from strategic issues related to the latest technological developments such as artificial intelligence and connected devices to the implementation of global privacy compliance programs and mechanisms to legitimize international data flows.

Eduardo is the author of The Future of Privacy (DataGuidance, 2013), a ground-breaking book where he anticipates the key elements that organizations and privacy professionals will need to tackle to comply with the regulatory framework of the future.

Eduardo is co-founder and editor of Data Protection Leader, a member of the panel of professionals of DataGuidance, and a former member of the Board of Directors of the IAPP. Eduardo is executive editor of European Data Protection Law and Practice (IAPP, 2018), and co-author of Data Protection: A Practical Guide to UK and EU Law (OUP, 2018), Beyond Data Protection (Springer, 2013), E-Privacy and Online Data Protection (Tottel Publishing, 2007) and of the Law Society’s Data Protection Handbook (2004). Eduardo has lectured at the University of Cambridge on data protection as part of its Masters of Bioscience Enterprise, and regularly speaks at international conferences.

Representative experience

Strategic advice on business-critical issues affecting the digital economy and in particular, the tech, auto, life sciences, retail, financial services, consumer and media sectors.
Contributing to the development of BCR as a mainstream mechanism to legitimize international data transfers and assisting many companies to obtain BCR approvals throughout the EU.
Leading numerous global privacy compliance projects and carrying out comprehensive data protection compliance assessments.
Contributing to the legislative process across the EU and internationally, including leading the team responsible for drafting the Personal Information Protection Act of Bermuda.
Assisting the UK Ministry of Justice to formulate its policy position in connection with the EU data protection legislative reform.
Assisting organizations throughout the world to devise and implement workable strategies to legitimize global dataflows.
Implementing 'privacy by design and by default' programs and 'privacy impact assessments' to help clients embed data protection into their product development processes.
Creating innovative solutions to provide transparency in connection with data-related activities involving multiple technologies.


  • Licenciado en Derecho, University of Navarra
  • LLM, European and International Trade Law, University of Leicester
Bar admissions and qualifications
  • Certified Information Privacy Professional (CIPP/E)
  • International Association of Privacy Professionals


Acritas Star

Acritas Stars Independently Rated Lawyers

Leading Individual (Data Protection)

Legal 500

Star Individual (Data Protection)

Chambers UK

Media, Technology, and Telecoms: Cyber Law (Including Data Protection and Privacy), Recommended

Legal 500 US