Matthew Nuding is an associate in the London office of Wilson Sonsini Goodrich & Rosati, where he focuses on privacy, data protection, and cybersecurity law.

Matthew advises clients of all sizes on compliance with privacy and cybersecurity laws, including the General Data Protection Regulation and e-Privacy, as well as the Digital Services Act and the Digital Markets Act. He assists clients with investigations by UK and EU supervisory authorities and with data breach responses and notification. Matthew also covers a range of digital topics beyond privacy and cybersecurity, including AI, blockchain, and financial data access.

Prior to joining the firm, Matthew worked in the Organisation for Economic Co-operation and Development (OECD) in Paris, where he advised member governments on privacy and cybersecurity policy, liaising directly with government ministries in issuing advice, facilitating discussion, and organising events. In this role, he served on the Global Privacy Assembly’s COVID-19 Working Group, which facilitated discussions between Data Protection Authorities on government responses to COVID-19 from a data protection and privacy perspective. Matthew has also worked as a research assistant in the Guarini Global Law & Tech program at New York University, where he examined the Securities and Exchange Commission's regulation of data, including the use of alternative data and the deployment of digital engagement practices. In addition, he worked at a tech company, Web Summit, in Dublin and Lisbon.

Matthew previously completed a legal secondment at the Information Commissioner’s Office, the UK’s privacy regulator, where he worked on a broad range of regulatory and enforcement matters, as well as legal policy issues.