Eleonor Duhs

Barrister, Fieldfisher
Eleonor specialises in privacy and information law. She was the UK Government’s lead lawyer in EU negotiations on the GDPR.
She has extensive, in-depth knowledge of the GDPR. She represented the UK in meetings in Brussels, drafted text for inclusion in the legislation, and worked with the European Commission, representatives from other EU Member States, regulators and stakeholders to develop the regime.  
She also has extensive experience of advising the UK Government on data protection and information law issues, including compliance and risk in high profile projects. 
She advises clients from central government, public bodies, financial institutions, retail companies, property management firms, IT service providers and MedTech companies on privacy law issues including tracking or monitoring of data subjects, collection, use and retention of personal data, data sharing, international data transfers, and the impact of Brexit on data protection.  
As a senior government lawyer Eleonor gained extensive experience of public and EU law. In addition to her work on data protection and information law in the Ministry of Justice she worked in the Department for Exiting the European Union where she led on aspects of the European Union (Withdrawal) Act 2018, the Withdrawal Agreement and the framework for the future UK-EU relationship. 
Eleonor was the Foreign and Commonwealth Office’s lead lawyer on the European Union (Referendum) Act 2015. She has also represented the UK at the United Nations Human Rights Council in Geneva.
Contributed to


Personal data transfers between the EEA and UK—sub-provision for standard contractual clauses to apply if no adequacy

This precedent contains templates designed to be inserted as additional commercial provisions into the clauses for international transfers of personal data adopted by the European Commission (commonly called the standard contractual clauses or Model Clauses) in order to provide that the executed standard contractual clauses will apply: (a) if the UK exits the Brexit transition (or ‘implementation’) period without an adequacy decision that generally permits continued transfers of personal data from the European Economic Area (EEA) to the UK; or (b) if following the end of the Brexit transition period the UK ceases to allow unrestricted transfers of personal data from the UK to the EEA.

Practice areas


  • BA (English and Modern Languages) (1996)
  • Common Professional Examination (1997)
  • Bar Vocational Course (1998)


  • International Association of Privacy Practitioners


  • Contributing Author


  • University of Oxford (1992-1996)
  • City University (1996-1997)
  • Inns of Court School of Law (1997-1998)

If you expected to see yourself on this page, click here.