Home / People / Emma Burnett
Portrait ofEmma Burnett

Emma Burnett

Head of Data Protection

CMS Cameron McKenna Nabarro Olswang LLP
Cannon Place
78 Cannon Street
United Kingdom
Languages English

Emma Burnett is a partner in the Commercial Team and her practice focuses on data protection, technology and outsourcing. She regularly advises high profile international clients on her core specialism of data protection and has significant experience in information technology and intellectual property law, having previously undertaken a secondment to Royal Mail Group Limited as acting Head of the IT/IP legal team.

Emma has extensive experience in drafting and negotiating commercial agreements, including licences and terms and conditions for the supply of goods and services. Emma is known for her proactive, solutions orientated approach and acts for clients across a wide range of industry sectors, including the technology, media and telecommunications, life sciences and financial services sector. Emma sits on the editorial board of Lexis PSL where she advises on data protection, IT and telecoms. She is also a member of the Financial Markets Law Committee, as part of which she has participated in a European Data Protection Reforms Working Group on the EU’s General Data Protection Regulation. 

more less

We think Emma Burnett is great, really proactive and helpful. She comes up with solutions and does what she says she will do.

Client Feedback

Relevant experience

  • A retail company in relation to a comprehensive IT transformation project with a value of between £1-2bn.  The new IT operating model involves the appointment of a ‘service integrator’ supplier who will manage and integrate all IT services. 
  • An international telecoms company drafting binding corporate rules and interfacing with the Information Commissioners Office  including assisting in the analysis of the business’ data flows, current methods of international data transfer and managing the project as a whole, as well as presenting it to internal stakeholders.
  • A retail company on an MVNO creating a major new entrant in the mobile retail sector. As this was a multi supplier solution, Emma advised the business on the overall contracting structure and on each individual agreement with over 11 suppliers to ensure the integration of services, devices and systems to ensure a seamless customer experience. 
  • A major logistics business on the implementation of a group wide governance strategy including advising on the personal data and security issues relating to the development, launch and operation of an HR IT platform; support in lobbying and responding to the Ministry of Justice call for evidence on the proposed draft General Data Protection Regulation and on the strategic approach to a requested ICO audit.
  • A leading international asset manager on a complex multi-jurisdictional project co-ordinating advice from 14 countries across Europe. The project related to the client’s direct marketing and privacy notice requirements in each jurisdiction. Emma also advised in the development of a single comprehensive website privacy notice designed to address the legal requirements across multi-jurisdictions.
  • An international retailer on the unified procurement of its global communication services for all group companies in the UK, Ireland, France, Germany, Spain, Portugal, Poland, Russia, Turkiye, Hong Kong and China.
  • A retail bank on the licensing, hosting and support arrangements for a European trading platform.
  • A multinational organisation on a review of its privacy policies across 85 jurisdictions worldwide.
  • Clients in various sectors on installation and monitoring of CCTV and telemetry systems within vehicles, including specific advice on undertaking impact assessments.
  • A retail bank on the outsourcing of its group-wide domestic and global courier services.
more less

Memberships & Roles

  • Member,  the Financial Markets Law Committee
  • Member, the editorial board of Lexis PSL
more less


  • 1996 – LPC (Commendation), College of Law, Guildford
  • 1995 – CPE (Commendation), College of Law, Guildford
  • 1994 – BA (Hons) History (2:1), University of Exeter, Exeter
more less


Data protection and cybersecurity laws in the United Kingdom
Data protection 1. Local data protection laws and scope The Data Protection Act 2018 (“DPA”) covers general processing of personal data in the UK. The DPA supplemented the EU General Data Protection...
UK-US data bridge now live: What do you need to know?
The UK-US data bridge (live from 12 October 2023) offers a new streamlined option for transfers of personal data from the UK to the US in the case of participating companies. This follows an assessment...
UK government resumes proposed reform of UK data protection laws
On 8 March 2023, the UK government resumed its proposed reform of UK data protection laws with the introduction to Parliament of the Data Protection and Digital Information (No. 2) Bill, a replacement...
International transfers of personal data: ICO update on UK Binding Corporate...
In late July 2022, the office of the UK data protection regulator, the Information Commissioner’s Office (ICO), issued new guidance on applying for and receiving approval for UK Binding Corporate Rules...
The Mobile Century 2022
CMS is delighted to support The Mobile Century, a publication written by women in the digital space, published by the Global Telecom Women’s Network (GTWN). The GTWN 30th Anniversary Publication is a special edition. The theme “Re­flec­tions” brings together the perspectives of the older generation of women who have lived experience of the evolution of ICT over the past three decades and beyond, with women of the younger generation, while looking ahead to what work remains to be done. This seminal work includes essays by global experts in: Tech evolution from the early days of the internet and the mobile phone to today; Tech ESG and how digital technology can drive sustainability into the future; Tech safety, protecting yourself and others online; Tech equity, bridging the digital divide; and Future tech, with a focus on the impact of artificial intelligence. You can either browse the publication online or fill in your details below to download the full publication.
CMS advises ViacomCBS and Comcast on joint venture partnership to launch...
International law firm CMS has advised ViacomCBS and Comcast on aspects of their partnership to launch a new subscription video on demand (SVOD) streaming service, SkyShowtime. The partnership will be...
Data protection and security
Expert legal advisers
Legal precision in privacy, data security and data protection - Expert...
Expert legal advisers in Africa
GDPR 3 years on – The greatest hits (and misses)
More than three years have passed since the GDPR applied and a lot has happened in the world of data protection during that time – fines, class actions, court challenges and more. We give our “playl­ist”...
Data protection update: latest developments on EU and UK transfers
Background On 28 June 2021, the European Commission issued two EU adequacy decisions finally bringing to an end the uncertainty over whether transfers of personal data from the EU to the UK could continue...
UK regulators outline roadmap for cooperation in the regulation of digital...
On 10 March 2021, the Digital Regulation Cooperation Forum (DRCF) published its first annual plan of work for 2021/2022 for cooperation, coordination and a coherent regulatory approach to digital and...
Progress towards adequacy: European Commission publishes draft adequacy...
Background On Friday 19 February, the European Commission announced that it had formally launched the procedure to adopt two adequacy decisions for data transfers to the UK. While the decisions have not...