Daniel Millard

Daniel advises technology companies, from early-stage startups to global platforms, on UK and EU regulation that shapes how their products are built, launched and scaled. He also represents them when regulators come calling, from informal engagement and information requests through to formal investigations, enforcement and beyond.

Daniel works directly with founder-led companies, product leads and engineers. His advice starts from how a system actually works and ends with a clear route to launch. His clients include AI developers, business-to-business software-as-a-service (B2B SaaS) providers and data centre operators. Daniel’s practice spans data protection, cybersecurity, AI and platform regulation and includes:

• Product counselling: Helping teams design and ship new features, particularly AI and data-driven products, so they hold up under the EU General Data Protection Regulation (GDPR) and UK GDPR, the ePrivacy Directive and the UK Privacy and Electronic Communications (EC Directive) Regulations (PECR), the EU AI Act, the EU Digital Services Act (DSA) and the UK Online Safety Act 2023 (OSA) from day one.
• Regulatory investigations: Guiding clients through inquiries and enforcement action by EU and UK data protection authorities, Ofcom and the European Commission.
• Cyber incident response: Advising on security incidents and personal data breaches from the first hours through notification, regulator engagement and customer communications, including under EU and UK cybersecurity law.