Ashley Winton focuses his practice on global data protection and privacy, information governance and cybersecurity compliance. He has particularly in-depth knowledge of cyber breach response, cybersecurity in the context of payment systems, the lawful interception of data, and the conflict of laws in relation to corporate and government investigations and international litigation. Ashley frequently represents major corporations, trade associations, charities and government entities on a range of data privacy and cybersecurity issues and he has significant experience in advising on the impact of privacy and cybersecurity law on cloud services, health care and international data transfers.

Show More


  • Advising a listed payment company in relation to one of the largest breaches of personal data in the UK
  • Advising a FTSE 250 payments company in relation to the discovery on the dark web of a large set of personal data credentials that were stolen from a company that it had recently acquired
  • Advising a regulated financial services client on implementing outsourced distributed denial of service (DDoS) protection, and responding to DDoS incidents

Show More


  • Chambers & Partners UK 2017, UK Data Protection & Information Law, listed annually since 2001
  • Chambers & Partners UK 2017, Information Technology, listed annually since 2001
  • Legal 500 2017, Data Protection, listed annually since 2001

Show More


  • Fellow of the Ponemon Institute
  • Chairman of the UK Data Protection Forum
  • Member, British Computer Society

Show More


College of Law, 1993
City University, Law, 1992
Manchester University, BSc, (Hons), M.Eng., 1991

England and Wales