Lucy Tucker advises clients on data privacy, cybersecurity, and commercial contracts, with a particular focus on Middle East and EU/UK privacy laws.

Ms. Tucker advises a broad range of clients from startups to technology giants on a wide range of privacy matters, including in relation to the launch of new products and services, M&A transactions, regulatory investigations, the privacy risks of new technologies, data processing agreements, international data transfers, data protection impact assessments, direct marketing, cookies, and transparency requirements.

Prior to joining Latham & Watkins, Ms. Tucker trained and qualified at PwC, where she focused on large scale GDPR transformation projects.

Ms. Tucker is a Certified Information Privacy Technologist (CIPT), awarded by the International Association of Privacy Professionals (IAPP) and also holds a Practitioner Certificate in Data Protection, awarded by BCS - The Chartered Institute for IT.

Ms. Tucker’s experience includes advising: 

  • Meta (formerly Facebook) on data privacy issues in relation to its services and strategic acquisitions, including its acquisitions of the game developer, Ready at Dawn, the Gif provider, Giphy Inc., and customer service CRM platform, Kustomer Inc.
  • A foreign sovereign wealth fund on multiple ultra high-tech megaprojects on the development of its data privacy and cybersecurity laws
  • A multinational corporation on the privacy implications of the EU Digital Markets Act
  • A multinational professional services firm on its “best-in-class” global Privacy Impact Assessment program
  • A significant social media company in matters before international regulatory bodies in connection with data protection compliance and other issues relating to privacy and security 
  • A global conversation technology company on its data protection model, relationships with third parties, ads profiling and how it uses and trains AI/ML 
  • A global media group on the territorial scope of GDPR, including in relation to joint controllership and processor requirements 
  • IXL Learning on its acquisition of the Rosetta Stone languages division, a platform used by 11 million students
  • Square Inc. on the acquisition of Verse, a peer-to-peer payments app
  • A global cosmetics retailer on its loyalty program, website terms and privacy policy
  • A global energy company on the review and sharing of EU employee correspondence and documentation in relation to a US litigation matter
  • A multinational hedge fund and financial services company on commissioning polls and the use of social media data to analyze political statements 
  • A betting company on the use of facial recognition technology in its venues
  • Numerous companies on data protection matters ahead of stock market listings

Bar Qualification

  • England and Wales (Solicitor)


  • Legal Practice Course, Kaplan Law School, 2015
  • LLM in European and International Tax Law, Lund University, 2014
  • LLB Bachelor of Law, University of Birmingham, 2013

Languages Spoken

  • English