Ellie Cater

Senior Associate

Practice areas

• Capital market law
• Commercial litigation
• Corporate
• Financial services disputes and investigations
• Fraud and financial crime
• International arbitration
• Privacy, data protection and cybersecurity
• Real estate dispute resolution
• Real estate investment
• Technology, Media and Telecoms

Practice notes

Ellie is a Senior Associate in our Intellectual Property, Technology and Data Protection team, and primarily specialises in data protection and privacy, ePrivacy and freedom of information matters.

She recently joined the team from a US-headquartered, global technology provider where she was a Privacy Counsel; and, prior to that, she was an Associate within the Privacy and Data Protection practice group of a London-based law firm for close to six years. Ellie primarily advises on data protection and privacy, ePrivacy and freedom of information matters.

Within those disciplines, Ellie has in-depth experience in advising national and international, and public and private clients on large-scale and global GDPR compliance projects, product and technology development in line with privacy-by-design principles, data transfer projects and contractual negotiations. She has extensive experience in advising on strategic issues, such as, GDPR territorial scope, the one-stop-shop mechanism and the appointment of DPOs; and the handling of data subject rights requests, FOIA requests, personal data breaches and supervisory authority inquiries.

Ellie’s recent experience includes:

• advising on the handling (including, detection, containment, investigation, remediation and customer communication) of a wide-scale security incident;
• advising on and drafting a response to the Office of the Information Commissioner regarding a client’s handling of an FOI request within a highly contentious and public context;
• advising on the data processing role categorisation as regards actors within the context of smart metering;
• leading customer-facing GDPR training sessions; and
• advising on the implementation of a GDPR compliance project within a global corporate group.