Full Profile

Richard is a specialist cyber risk advisor and is known for managing global data breach incidents, working hand in hand with our international and regional offices. Richard has spearheaded the development of Clyde & Co’s technology-led ‘Global Regulation Hub’, allowing Clyde & Co to seamlessly advise clients on local Privacy Laws and service cross-border data breaches.

Richard regularly advises local, trans-Tasman and London based clients on cyber incident and crisis response, data protection and privacy issues, cyber insurance, IT liability and recovery actions, third party claims and regulatory investigations. He also has extensive experience providing clients with pre-incident services including the review, development and implementation of systems and processes to address cyber risk.

Richard has developed strong relationships within the cyber-insurance industry and has advised on several complex instructions hitting the Australian and London markets. Richard is admitted to practise in Australia and New Zealand and is actively involved in Clyde & Co’s trans-Tasman offering.

Richard and the team have advised on over 1,500 incidents to date and bring a wealth of experience to every incident.

Connect with Richard on LinkedIn here, for regular industry updates.

Experience

Richard is part of Clyde & Co’s Cyber, Digital Law and Resilience team.

The team has developed a global, yet locally tailored, cyber risk solution focused on three phases: Readiness, Response, Recover.

• Readiness: Boosting organisational resilience, supply chain risk management, and preparedness pre-incident.
• Response: Mitigating impact, and maintaining stakeholder trust through taking decisive action, during a cyber incident.
• Recover: Getting back to business as quickly as possible and managing disputes and regulatory investigations, post-incident.

In his role, Richard regularly advise clients locally, across the Asia Pacific region and globally on cyber incident and crisis response, data protection and privacy issues, including:

• overall incident response management and vendor coordination;
• ransomware response and recovery, including sanctions and compliance risk;
• extortion negotiations and threat intelligence;
• payment misdirection fraud, funds tracing and funds recovery;
• email and social media account takeover response;
• communications strategy and stakeholder management;
• data breach assessment and notification, including coordination of global and multi-party data breaches across 100+ jurisdictions;
• e-safety, image based abuse and cyber bullying;
• regulatory response, including dealing with the OAIC, NZOPC, ASIC, APRA, the ACCC and other regulators across 50+ jurisdictions;
• third party claims disputes;
• recovery litigation against wrongdoers; and
• class action risk relating to privacy breaches.

Contact the team if you would like to discuss.