Irina Vasile

Irina’s experience includes advising:

• Some of the world’s largest technology companies on regulatory engagements with the UK Information Commissioner’s Office, the Irish Data Protection Commission, and other EU data protection and consumer protection regulators*
• A leading multinational technology company during a UK CMA investigation regarding potentially misleading consumer practices
• A prominent global technology company on two class actions alleging non-compliances with data protection and consumer protection legislation*
• Very large online platforms (VLOPs) on compliance with the Digital Services Act, including regarding risk assessments, online interface design, notice and action mechanisms, recommender systems, and assisting with engagements before EU online safety regulators
• Companies from various industries, including telecommunications and recruitment, on compliance with the EU AI Act, particularly focusing on high-risk AI systems and associated requirements
• Leading AI developers on the launch of new AI models/features, including assisting with proactive briefings before data protection and consumer protection regulators*
• Global clients on compliance with relevant legal requirements for consumer online journeys, user-facing materials relevant for privacy and consumer protection, internal accountability documentation such as data protection impact assessments, and procedures for handling data subject rights and consumer complaints
• Over-the-top communication providers on EU and UK requirements, including in relation to processing communications content, traffic and location data, and security measures relevant for this sector
• Companies across various industries on complex data sharing arrangements, including transfer mechanisms and associated transfer impact assessments
• A major financial institution on data privacy matters regarding its digital banking products and call center activities*
• Companies across various industries on employee monitoring and data protection aspects of internal, employee-related investigations
• Intuit on its acquisition of Mailchimp and subsequently assisting with the integration phase from a privacy perspective
• A digital health group on consumer protection and data protection implications related to its administration and sale, including the change in service provider and data controller
• The underwriters on privacy aspects in connection with the IPO of Amer Sports, a global group of iconic sports and outdoor brands
• The underwriters on privacy matters in connection with the IPO of a leading information-content and technology company

*Matter handled prior to joining Latham