Nicholas Westbrook

Nicholas Westbrook

Senior Associate

Email [email protected]​

Phone +44 20 7296 2068

Fax +44 20 7296 2001

Practice groupGlobal Regulatory

Nick helps clients interpret, shape and implement digital regulation.  

The rules which govern how organisations may collect and use data are increasingly complex. Emerging principle-based requirements blur traditional distinctions between legal practice areas, and require consideration of issues spanning privacy, ethics, antitrust, online content, product liability, cybersecurity, data localisation, intellectual property, contract law, and more.

A member of the firm’s Privacy and Cybersecurity practice, Nick helps clients thoughtfully navigate the global policy challenges and opportunities these emerging laws present. He also advises on compliance, product design and enforcement.

Nick has worked with clients across the internet and technology, financial, insurance, health care, advertising, automotive and creative sectors. His current areas of focus include data sharing, data scraping, scientific research, data boards, and artificial intelligence.

Nick contributes regularly to the firm's Pro Bono practice, with a particular focus on initiatives supporting diversity and inclusion. He is also a contributing author to European Data Protection: Law and Practice (IAPP, 2018, 2019, 2022).

Education and admissions


B.A., Oxford University, 2010

Bar admissions and qualifications

Solicitor, England and Wales

Representative experience

Advising on the development of the EU-US Privacy Shield replacement.

Drafting a global technology company’s response to a UK Government consultation on reforming the UK data protection regime.

Advising on privacy issues relating to a competition law investigation into a browser provider’s intention to phase out third party cookies.

Advising on EU, UK and US policy and legislative efforts to facilitate data sharing between platforms and independent researchers.

Advising a leading consent management platform on the implications of the Belgian IAB decision.

Advising a global technology company on the interaction between the EU e-Privacy Regulation, Digital Services Act and Digital Markets Act.

Assisting several global technology companies to engage with EU lawmakers on the draft e-Privacy Regulation.

Advising on EU policy efforts to embed ethical approaches within organisational data governance frameworks.

Conducting a pan-EU compliance assessment for a global technology company rolling out an employee monitoring and performance assessment AI technology.

Assisting several FTSE and Fortune 100 companies throughout the design and implementation of their GDPR compliance programmes.

Loading data