Scott Morton#14484

Scott Morton

Scott Morton advises clients on technology and trade regulations, with a particular focus on data protection, cybersecurity, AI, export controls and sanctions.

Scott works with clients ranging from global multinationals to high-growth and emerging companies on the regulatory and commercial challenges arising from the development, deployment and cross-border use of technology. His practice covers privacy and data protection compliance, AI and automated decision-making governance, cybersecurity risk management, product compliance and international data transfers.

Scott advises on the design and implementation of global privacy, data-sharing and AI governance frameworks across the UK, the EU and internationally. He supports organizations with regulatory documentation and risk assessments, including privacy notices, DPIAs, AI governance frameworks and data protection agreements. Scott further advises on the compliant design and operation of consumer-facing products and services, including website and product terms, and the use of data, analytics, digital marketing, advertising and social media technologies.

Alongside his technology regulatory work, Scott advises on international trade and sanctions compliance, particularly where trade controls intersect with technology, data, supply chains and global operations. He regularly supports clients on UK and EU sanctions, export controls, licensing, product compliance, foreign direct investment, internal compliance programs and regulatory risk assessments, including in the context of complex cross-border transactions and technology-driven business models.

Scott also advises on complex commercial and technology arrangements, including the development, licensing and assignment of intellectual property rights, as well as trademark prosecution and opposition matters.
Contributed to

1

Data protection principles
Data protection principles
Practice Notes

This Practice Note covers the principles for handling personal data that form the core of the United Kingdom General Data Protection Regulation, Assimilated Regulation (EU) 2016/679 (UK GDPR), and which are set out in Article 5 of the UK GDPR regime. The principles include: the lawfulness, fairness and transparency principle, the purpose limitation principle, the data minimisation principle, the accuracy principle, the storage limitation principle, the integrity and confidentiality principle (which relates to data security) and the accountability principle.

Practice Area

Panel

  • Contributing Author

Qualifications

  • Legal Practice Course (2013)
  • LLB (2008)

Education

  • BPP Law School (2013)
  • University of Nottingham (2008)

If you expected to see yourself on this page, click here.