Jane Finlayson-Brown
Jane is the global co-head of A&O Shearman’s Data, Digital, IP and Technology practice, specialising in data and digital/AI advisory and transactional work.
Jane has a particular focus on AI and has advised for many years on the question of data ethics and the use of data in AI, and is currently working on a number of AI related mandates.
More generally, she regularly advises companies on the use of data in the provision of consumer and business products, including on issues relating to repurposing of data, profiling, ad-tech and direct marketing. She also advises on a wide range of other data protection issues such as data subject requests, data security breaches, data protection investigations, cross border data transfers, transfers of data to overseas regulators, customer relationship management, employee monitoring, data protection policies and procedures and website compliance issues.
These projects often involve grey zone areas where there is a heightened privacy risk, where Jane helps companies make strategic decisions.
Jane is recognised as a Leading Individual for Data Protection, Privacy and Cybersecurity (Legal 500, 2026) and was awarded “Best in Privacy and Data Protection” at the 2020 European Women in Business Law Awards. She worked alongside her fellow partner, Ben Regnard-Weinrabe to write a chapter on the intersection of payments and data protection requirements for FinTech: Law and Regulation (Elgar Financial Law and Practice series).
Contributions by Jane Finlayson-Brown
-
The Digital Compliance Matrix: Making Sense of the Overlapping Web of Data Laws
Speaker at IAPP UK Intensive 2026: Privacy | AI governance | Cybersecurity law -
A Risk Based Approach to AI Governance — Global Best Practices
Speaker at IAPP Europe Data Protection Congress 2025 -
AI Case Law, Enforcement Action and its Impact: Key Risks, Trends and Strategies
Speaker at IAPP Data Protection Intensive: UK 2024 -
Generative AI: Managing Privacy and Compliance Risks Of Revolutionary Technology
Speaker at IAPP Europe Data Protection Congress 2023