Information law

Data protection barristers

Data protection disputes can arise from a single misdirected email or a major cyber incident. A data protection barrister helps businesses manage the risk and helps individuals understand what their claim is really worth.

Barrister reviewing documents relating to a data breach and UK GDPR compliance.

What a data protection barrister does

Data protection barristers advise on the UK General Data Protection Regulation, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations and related privacy law. They act for organisations of all sizes, from professional firms and charities to retailers, technology companies and public bodies, and for individuals whose data has been misused.

For organisations, counsel can advise on lawful bases for processing, international transfers, employee monitoring, direct marketing, data sharing agreements and responding to a breach, including whether and when to notify the Information Commissioner's Office and the people affected. For individuals, counsel can advise on subject access requests, compensation for breaches, and related claims such as misuse of private information, breach of confidence and harassment.

Many disputes are won or lost on early handling. A careful response to a subject access request, a breach notification or a letter of claim often prevents a much larger problem later.

Common instructions

Where data protection barristers are often used

Data breach claims

Defending or bringing claims after cyber attacks, lost devices and misdirected correspondence, including group claims.

Subject access disputes

Requests used tactically in employment and commercial disputes, exemptions, and applications to court to enforce or resist.

ICO investigations

Responding to ICO enquiries, enforcement notices and monetary penalty notices, and appeals to the First-tier Tribunal (Information Rights).

Misuse of private information

Publication or disclosure of private details, often alongside defamation and harassment claims.

Employment data issues

Monitoring, background checks, disciplinary investigations and data taken by departing employees.

Freedom of information

Requests to public authorities, refusals, and tribunal appeals.

Compensation

What data breach claims are realistically worth

Individuals can claim compensation under Article 82 of the UK GDPR and section 168 of the Data Protection Act 2018 for material and non-material damage, including distress. However, the courts have made clear that trivial breaches do not justify litigation, and many low-level claims are worth only modest sums or are struck out.

Since the Supreme Court's decision in Lloyd v Google, representative claims for loss of control of data without showing individual damage are much harder to bring. Claims that succeed usually involve sensitive information, clear evidence of harm, or misuse that was deliberate.

That is why good advice at the start is valuable for both sides. A barrister can assess the strength and value of a claim before costs build up, and help organisations respond proportionately rather than settling claims that have no merit.

Fees

What a data protection barrister costs

Written advice on compliance or on a claim typically starts from around £1,000 to £2,500 plus VAT depending on complexity. Responding to a letter of claim or drafting a subject access response is usually quoted as a fixed fee. Attendance at a short hearing usually starts from around £1,000, and a one-day hearing from around £2,500 plus VAT for experienced junior counsel.

ICO enforcement work, tribunal appeals and group claims are priced according to scope. Every fee includes preparation and is agreed in writing before work starts.

Instructing counsel

Instructing a data protection barrister

Businesses, in-house teams, data protection officers and individuals can instruct counsel directly under the Public Access scheme, which is often the most cost-effective route for advice and drafting. For larger litigation, counsel may suggest a solicitor to manage disclosure.

Send us a summary of the issue, any correspondence and key dates. We will match you with counsel experienced in information law and send a written fee before you decide. Clerk & Counsel is an intermediary and clerking service; panel barristers are independent and regulated by the Bar Standards Board.

Preparation

Before you contact us

Collect the key documents first: the breach notification or incident report, the request or complaint you received, any ICO correspondence, and your privacy notice and relevant policies. For individuals, keep a note of what information was disclosed, to whom, and how it has affected you, including any medical or financial impact. Note every deadline, especially the one-month period for responding to a subject access request and the 72-hour window for breach reporting. With that material counsel can give practical advice quickly and focus on what matters, rather than spending time reconstructing events.

FAQs

Common questions

Can I claim compensation for a data breach?

Possibly, if you have suffered material damage or real distress. Trivial breaches rarely justify a claim. A barrister can tell you what your claim is realistically worth.

Do we have to report a data breach to the ICO?

You must report a personal data breach to the ICO within 72 hours of becoming aware of it, unless it is unlikely to result in a risk to people's rights and freedoms. Counsel can advise urgently.

Can a business instruct a data protection barrister directly?

Yes. In-house teams, DPOs and business owners can instruct counsel under the Public Access scheme for advice, drafting and hearings.

Someone is using a subject access request to fish for evidence. What can we do?

You still need to respond lawfully, but exemptions may apply and you can limit the search reasonably. A barrister can advise on a proportionate response.

How much does a data protection barrister cost?

Written advice often starts from around £1,000 to £2,500 plus VAT, and a one-day hearing from around £2,500 plus VAT. Fees are agreed in writing first.

Clerk & Counsel is an intermediary and clerking service. We do not provide legal advice or legal representation. Barristers instructed through Clerk & Counsel are independent legal professionals regulated by the Bar Standards Board and are responsible for the legal services they provide. It is free to submit an enquiry; if you instruct a barrister through us, our service fee of up to £150 depending on urgency is shown separately from the barrister's professional fee before you decide.

Related pages

Facing a data breach or claim?
Get clear advice quickly.