WSGR logoWSGR logo
Tom Evans
Of Counsel
Data, Privacy, and Cybersecurity
London

D44-20-39634074

Download vCard
Open PDF
  • Tom is a frequent contributor to the WSGR Data Advisor

    Wilson Sonsini’s Data Advisor is your source for privacy news and insights, brought to you by our global privacy and cybersecurity team. Visit wsgrdataadvisor.com and subscribe to stay connected.

Tom Evans is Of Counsel in the London office of Wilson Sonsini Goodrich & Rosati (UK) LLP, where his practice focuses on providing clear and business-focused advice to clients on digital regulatory issues.

Tom’s data protection and cybersecurity practice involves counseling clients on both contentious and non-contentious matters concerning the GDPR, UK GDPR, and e-privacy legislation. He regularly advises clients including start-ups and corporates on issues such as:

  • Creating and implementing global compliance programs;
  • Defending regulatory investigations and enforcement proceedings;
  • The deployment of AI, including by “gig economy” clients;
  • Product development, including for companies operating in the adtech ecosystem;
  • Responding to complaints and requests made by individuals to exercise their rights under the data protection laws;
  • Negotiating data processing provisions in commercial agreements;
  • Complying with the UK Age Appropriate Design Code;
  • Electronic marketing;
  • Navigating data protection and marketing issues arising in the context of mergers and acquisitions;
  • Cross-border data transfers.

Tom also advises technology companies operating in Europe on compliance with the EU’s Digital Services Act and the UK’s Online Safety Act. He has experience advising clients on engaging with regulators including Ofcom in this context.

Prior to joining the firm, Tom was a senior associate in the London office of Bryan Cave Leighton Paisner LLP. He also worked as an associate in the London office of Reed Smith LLP.

Experience

Tom Evans is Of Counsel in the London office of Wilson Sonsini Goodrich & Rosati (UK) LLP, where his practice focuses on providing clear and business-focused advice to clients on digital regulatory issues.

Tom’s data protection and cybersecurity practice involves counseling clients on both contentious and non-contentious matters concerning the GDPR, UK GDPR, and e-privacy legislation. He regularly advises clients including start-ups and corporates on issues such as:

  • Creating and implementing global compliance programs;
  • Defending regulatory investigations and enforcement proceedings;
  • The deployment of AI, including by “gig economy” clients;
  • Product development, including for companies operating in the adtech ecosystem;
  • Responding to complaints and requests made by individuals to exercise their rights under the data protection laws;
  • Negotiating data processing provisions in commercial agreements;
  • Complying with the UK Age Appropriate Design Code;
  • Electronic marketing;
  • Navigating data protection and marketing issues arising in the context of mergers and acquisitions;
  • Cross-border data transfers.

Tom also advises technology companies operating in Europe on compliance with the EU’s Digital Services Act and the UK’s Online Safety Act. He has experience advising clients on engaging with regulators including Ofcom in this context.

Prior to joining the firm, Tom was a senior associate in the London office of Bryan Cave Leighton Paisner LLP. He also worked as an associate in the London office of Reed Smith LLP.

Focus Areas
Recent Insights
Alerts
UK Brings Forward Bill to Reform UK Privacy Laws
In October 2024, the UK government introduced the Data (Use and Access) Bill (the Data Bill) to Parliament. The Data Bill represents a third attempt by UK ministers to bring about reforms to the UK’s data protection and ePrivacy regimes. If enacted, the Data Bill will introduce changes to the existing regime, including by reducing restrictions on automated decision-making and enhancing powers for the UK’s privacy regulator. It will also lay the groundwork for new “Smart Data” schemes, which will in future require companies operating in certain industries to share data with authorized and regulated third parties.
Learn More
Alerts
Regulators in Europe Signal Increased Scrutiny of Online Platforms
In recent months, politicians and regulators across a number of jurisdictions have called on operators of online platforms to take seriously their legal obligations to promote a safe online environment. The safety of children online has continued to dominate this conversation, with a recent joint UK-U.S. statement (Statement) declaring that online platforms should “go further and faster in their efforts to protect children.”
Learn More
View All
Recent Events
WSGR Events
AI-volution | Global AI Governance: What Should We Do Now?
New AI regulations are rapidly emerging around the globe, presenting companies with a raft of new compliance obligations which may vary across regions. It is becoming increasingly difficult for companies to keep up-to-date with this evolving legal landscape and to translate it into an actionable AI governance program.
Learn More
WSGR Events
AI-volution | New Legal AI Developments in the U.S., the EU, the UK, and China: Differences and Similarities
Global approaches to regulating AI are evolving quickly, creating a complex web of requirements for companies to navigate. From President Biden's recent Executive Order on Safe, Secure, and Trustworthy Artificial Intelligence to the European Union's AI Act; from the UK's AI Safety Summit to China's latest Provisions on Generative Artificial Intelligence Services, diverse approaches to regulating AI are emerging.
Learn More
View All
WSGR logo
Copyright © 2024 Wilson Sonsini Goodrich & Rosati. All Rights Reserved.