Skip to content

Thanks to technology, information can be created, copied and disseminated with ease. This has led to exponential growth in the quantity of personal and official information that organisations have a responsibility to manage.

To add to this complexity, healthcare organisations are faced with the twin legal obligations of releasing official information and protecting personal and confidential information. When these two obligations clash, the law can sometimes seem particularly difficult to interpret.

There’s no denying data protection is a difficult area of law to navigate, but our expert team of specialists will focus on the details, and guide you through the process, taking a risk-based approach to your specific case.

The legal landscape can feel overwhelming. If you need help and support to clarify your obligations and protect your data and your organisation, we’re here to help.

Our services
  • Access to health records
  • Agreements with suppliers
  • Camera surveillance
  • Controller, processor, joint controller assessments
  • Data protection impact assessments
  • Data sharing
  • Disclosures to third parties
  • Environmental information
  • Freedom of Information
  • Information Commissioner’s assessments and investigations
  • International transfers
  • Monitoring
  • Policies, procedures and other compliance documentation
  • Privacy notices
  • Processor supply chains
  • Subject access requests and other individual requests
  • Third party requests by police or others
  • Training

Contact a specialist

Judy Baker

Partner | IP/IT

+44 (0) 330 137 3439

+44 (0) 784 351 5807

Email Judy Baker

Read bio

Phil Tompkins

Partner | Commercial

+44 (0) 330 137 3415

+44 (0)7980 769 630

Email Phil Tompkins

Read bio

View all contacts

What people say

  • Indepth knowledge of all legal issues, in particular with regards to data protection and GDPR makes them unique.

  • The team are highly professional with excellent knowledge of the NHS and in particular the Ambulance Service. They are very reliable and promptly respond to clients requests. Ward Hadaway are an exceptionally client-focused firm who truly work in partnership with Trust. Overall we have an extremely good working relationship providing high quality and value for money.

    Alan Gallagher, Head of Risk and Regulatory Services, North East Ambulance Service NHS Foundation Trust
  • We have a real sense of a fresh approach from Ward Hadaway in terms of client engagement which is providing the Trust with added value benefits in terms of both cost and quality of service.

    Paul Dowell MCIPS, Deputy Head of Procurement & Supplies, University Hospitals of Morecambe Bay NHS Foundation Trust
  • High quality advice to suppliers and customers in the private and public sectors. Also noted for expertise in data privacy law and its commercial implications.

    Chambers & Partners
  • IT law specialist Judy Baker of Ward Hadaway 'is very responsive and extremely hard-working, and really puts herself out to help with a quick turnaround,' reports one client. Another interviewee says she is 'very up to date and proactive'.

  • Judy Baker of Ward Hadaway is defined by her 'great expertise and knowledge of this subject [Data Protection], whilst wearing her skill lightly'. Sources also note that 'she is very pragmatic and gets us answers straight away'.

  • Demonstrates specialist skill in the field of data privacy and protection across IT and telecoms.

  • Judy Baker "takes a very forensic approach to privacy, does a great job of getting to the bottom of how clients use data, and is great at communicating directly with non-specialist professionals.

What we're thinking