Linzi Penman

Linzi Penman is a technology lawyer with over 7 years experience advising international private and public companies on matters relating to IT, commercial and data protection issues, with a particular focus on the Financial Services, Consumer Goods, Retail, Media and Entertainment sectors.

Linzi has assisted in several significant outsourcing and complex technology transactions; this work has involved business critical projects some of which have been valued in the hundreds of millions of pounds. Having gained considerable experience across a variety of matters, Linzi has invaluable insight and understanding of her clients’ needs and uses Design Thinking and Lean Six Sigma processes to find the right solution for each transaction.

Supporting the implementation phase across several global data protection compliance projects for some of the firm’s key clients, Linzi also has experience of producing pragmatic documents to ensure mature compliance with the data protection requirements. She has also negotiated complex data protection terms with some of the largest Silicon Valley tech vendors to ensure pragmatic compliance with the global myriad of data protection rules in line with her client's risk profile. Linzi has spent time seconded to DLA Piper's offices in Madrid and Washington D.C, and collaborates internationally with data protection colleagues in London, Amsterdam, Poland, Romania and Germany to provide consistent and pragmatic input on topical matters including AdTech, App User journey reviews (including cookie compliance, marketing consents and privacy notices) and data transfers. She was instrumental in launching Privacy Scorebox 2.0 - a global tool to assess and benchmark an organisation's level of data protection maturity: https://www.dlapiperdataprotection.com/scorebox/.

In 2021, Linzi was seconded to an investment firm and assisted them with negotiations relating to several business critical SaaS solutions, including an investment data management platform to deliver a consolidated source of real-time investment data, as part of its drive towards a simplified cloud infrastructure. This work extending into assisting the firm to revamp its regulatory checklist in light of Brexit and ESMA Outsourcing to the Cloud guidelines.