WSGR logoWSGR logo
WSGR logo
  • Experience
  • People
  • Insights
  • About Us
  • Careers

  • Practice Areas
  • Industries

  • Corporate
  • Intellectual Property
  • Litigation
  • Patents and Innovations
  • Regulatory
  • Technology Transactions

  • Capital Markets
  • Corporate Governance
  • Corporate Life Sciences
  • Derivatives
  • Emerging Companies and Venture Capital
  • Employee Benefits and Compensation
  • Energy and Climate Solutions
  • Executive Advisory Program
  • Finance and Structured Finance
  • Fund Formation
  • Greater China
  • Mergers & Acquisitions
  • Private Equity
  • Public Company Representation
  • Real Estate
  • Restructuring
  • Shareholder Engagement and Activism
  • Tax
  • U.S. Expansion
  • Wealthtech

  • Special Purpose Acquisition Companies (SPACs)

  • Environmental, Social, and Governance

  • AI and Data Center Infrastructure
  • Energy Regulation and Competition
  • Project Development and M&A
  • Project Finance and Tax Credit Transactions
  • Sustainability and Decarbonization
  • Transportation Electrification

  • U.S. Expansion Library and Resources

  • Post-Grant Review
  • Trademark and Advertising

  • Antitrust Litigation
  • Arbitration
  • Board and Internal Investigations
  • Class Action Litigation
  • Commercial Litigation
  • Consumer Litigation
  • Corporate Governance Litigation
  • Employment Litigation
  • Executive Branch Updates
  • Government Investigations
  • Internet Strategy and Litigation
  • Patent Litigation
  • Securities Litigation
  • State Attorneys General
  • Supreme Court and Appellate Practice
  • Trade Secret Litigation
  • Trademark and Copyright Litigation
  • Trial
  • White Collar Crime

  • Advertising, Promotions, and Marketing
  • Antitrust and Competition
  • Committee on Foreign Investment in the U.S. (CFIUS)
  • Communications
  • Data, Privacy, and Cybersecurity
  • Export Control and Sanctions
  • FCPA and Anti-Corruption
  • FDA Regulatory, Healthcare, and Consumer Products
  • Federal Trade Commission
  • Fintech and Financial Services
  • Government Contracts
  • National Security and Trade
  • Payments
  • State Attorneys General
  • Strategic Risk and Crisis Management
  • Tariffs, Customs, and Import Compliance

  • Antitrust and Intellectual Property
  • Antitrust Civil Enforcement
  • Antitrust Compliance and Business Strategy
  • Antitrust Criminal Enforcement
  • Antitrust Litigation
  • Antitrust Merger Clearance
  • European Competition Law
  • Third-Party Merger and Non-Merger Antitrust Representation

  • Anti-Money Laundering
  • Foreign Ownership, Control, or Influence (FOCI)
  • Team Telecom

  • AI in Healthcare
  • Animal Health
  • Artificial Intelligence and Machine Learning
  • Aviation
  • Biotech
  • Blockchain and Cryptocurrency
  • Clean Energy
  • Climate and Clean Technologies
  • Communications and Networking
  • Consumer Products and Services
  • Data Storage and Cloud
  • Defense Tech
  • Diagnostics, Life Science Tools, and Deep Tech
  • Digital Health
  • Digital Media and Entertainment
  • Electronic Gaming
  • Fintech and Financial Services
  • FoodTech and AgTech
  • Global Generics
  • Internet
  • Life Sciences
  • Medical Devices
  • Mobile Devices
  • Mobility
  • NewSpace
  • Quantum Computing
  • Semiconductors
  • Software

  • Offices
  • Country Desks
  • Events
  • Community
  • Our Diversity
  • Sustainability
  • Our Values
  • Board of Directors
  • Management Team

  • Austin
  • Boston
  • Boulder
  • Brussels
  • Century City
  • Hong Kong
  • London
  • Los Angeles
  • New York
  • Palo Alto
  • Salt Lake City
  • San Diego
  • San Francisco
  • Seattle
  • Shanghai
  • Washington, D.C.
  • Wilmington, DE

  • Law Students
  • Judicial Clerks
  • Experienced Attorneys
  • Patent Agents
  • Business Professionals
  • Alternative Legal Careers
  • Contact Recruiting
Tom Evans
Of Counsel
Data, Privacy, and Cybersecurity
London
tom.evans@wsgr.com

D44-20-39634074

Download vCard
Open PDF
  • Tom is a frequent contributor to the WSGR Data Advisor

    Wilson Sonsini’s Data Advisor is your source for privacy news and insights, brought to you by our global data, privacy, and cybersecurity team. Visit wsgrdataadvisor.com and subscribe to stay connected.

Tom Evans is Of Counsel in the London office of Wilson Sonsini Goodrich & Rosati (UK) LLP. His practice focuses on digital regulatory issues, including issues relating to content and online safety, privacy, and cybersecurity.

Tom advises technology companies operating in the EU and the UK on compliance with content-related legislation, including the EU’s Digital Services Act and the UK’s Online Safety Act, and he has a particular interest in issues relating to children’s safety online. He also advises on consumer protection issues, as well as risks relating to business models that rely on data scraping. He has experience advising clients on engaging with regulators including Ofcom in this context.

Tom’s data protection and cybersecurity practice involves counseling clients on both contentious and non-contentious matters concerning the GDPR, UK GDPR, and e-privacy legislation. He regularly advises clients including start-ups and corporates on issues such as:

  • Regulatory investigations, industry sweeps, and related actions, including regulator-led audits;
  • Defending enforcement actions, including regulatory fines;
  • Privacy issues arising in the context of clinical trials and other medical settings;
  • The deployment of AI, including by “gig economy” clients;
  • Product development, including for companies operating in the adtech ecosystem;
  • Responding to complaints and requests made by individuals to exercise their rights under the data protection laws;
  • Negotiating data processing provisions in commercial agreements;
  • Navigating the UK Age Appropriate Design Code;
  • Electronic marketing;
  • Navigating data protection and marketing issues arising in the context of mergers and acquisitions; and
  • Cross-border data transfers.

Tom is a regular speaker at industry events, including IAPP conferences and sessions arranged by the Society for Computers and Law.

Experience

Tom Evans is Of Counsel in the London office of Wilson Sonsini Goodrich & Rosati (UK) LLP. His practice focuses on digital regulatory issues, including issues relating to content and online safety, privacy, and cybersecurity.

Tom advises technology companies operating in the EU and the UK on compliance with content-related legislation, including the EU’s Digital Services Act and the UK’s Online Safety Act, and he has a particular interest in issues relating to children’s safety online. He also advises on consumer protection issues, as well as risks relating to business models that rely on data scraping. He has experience advising clients on engaging with regulators including Ofcom in this context.

Tom’s data protection and cybersecurity practice involves counseling clients on both contentious and non-contentious matters concerning the GDPR, UK GDPR, and e-privacy legislation. He regularly advises clients including start-ups and corporates on issues such as:

  • Regulatory investigations, industry sweeps, and related actions, including regulator-led audits;
  • Defending enforcement actions, including regulatory fines;
  • Privacy issues arising in the context of clinical trials and other medical settings;
  • The deployment of AI, including by “gig economy” clients;
  • Product development, including for companies operating in the adtech ecosystem;
  • Responding to complaints and requests made by individuals to exercise their rights under the data protection laws;
  • Negotiating data processing provisions in commercial agreements;
  • Navigating the UK Age Appropriate Design Code;
  • Electronic marketing;
  • Navigating data protection and marketing issues arising in the context of mergers and acquisitions; and
  • Cross-border data transfers.

Tom is a regular speaker at industry events, including IAPP conferences and sessions arranged by the Society for Computers and Law.

Education
  • MA (LPC with Business), BPP Law School, 2013
  • LL.B., Queen Mary University of London, 2012
Admissions
  • Solicitor, England and Wales
  • Solicitor, Republic of Ireland
Credentials
Education
  • MA (LPC with Business), BPP Law School, 2013
  • LL.B., Queen Mary University of London, 2012
Admissions
  • Solicitor, England and Wales
  • Solicitor, Republic of Ireland

Select Publications

  • Co-author, “CMA's Actions Signal New Spotlight on UK Consumer Law,” Law360, May 18, 2026
  • Co-author, “EDPB Issues First Guidelines on the Interplay Between the Digital Services Act and the GDPR,” Wilson Sonsini Alert, September 22, 2025
  • Co-author, “European Commission Publishes DSA Guidelines on the Protection of Minors Online,” Wilson Sonsini Alert, July 23, 2025

  • Co-author, “Consumer Protection in the UK: Update on Reforms Taking Effect in 2025 and 2026,” Wilson Sonsini Alert, July 11, 2025
  • Co-author, “UK Introduces New Legislation Amending Privacy Laws,” Wilson Sonsini Alert, July 1, 2025

  • Co-author, “The UK’s Online Child Safety Duties Are Coming into Force: Steps to Take Now,” Wilson Sonsini Alert, April 25, 2025
  • Co-author, “Upcoming Reporting Obligations Under the EU Digital Services Act,” Wilson Sonsini Alert, February 10, 2025
  • Co-author, “Ransomware Attacks: UK Government Proposes Ransom Payment Ban and Mandatory Notification Requirements,“ Wilson Sonsini Alert, January 24, 2025
  • Co-author, “The UK’s Online Safety Regime Is Coming into Force: Steps to Take Now,“ Wilson Sonsini Alert, January 23, 2025
  • Co-author, “Increased Focus on the Protection of Minors and Age Verification in the EU and the UK,” Wilson Sonsini Alert, January 9, 2025
  • Co-author, "UK Brings Forward Bill to Reform UK Privacy Laws," Wilson Sonsini Alert, November 5, 2024
  • Co-author, “Online Safety Act 2023: A Revolution in Regulation,” PLC Magazine, December 2023
  • Co-author, “Unlocking the Data Transfer Dilemma: the EU-US Data Privacy Framework,” Infosecurity Magazine, September 2023
  • Co-author, “UK and US Data Transfer Framework: Bridging the Gap,” PLC Magazine, June 2023
  • Co-author, “UK: A new recipe for lighter cookies,” Data Guidance, November 2021
  • Co-author, “Measuring global diversity and inclusion: the art of the possible,” International Association of Privacy Professionals, November 2021
  • Co-author, “Data protection reform: setting the course for a new direction,” PLC Magazine, September 2021
  • Co-author, “Selling adequacy after sunset,” Global Data Review, August 2021
  • Co-author, “M&A in the technology sector: understanding the key issues,” PLC Magazine, September 2019
  • Co-author, “Cookies and Adtech: the ICO’s ambitious recipe for compliance,” Society for Computers and Law, August 2019
  • Co-author, “Data subject access requests – three illuminating cases,” PDP Journals, July 2019
  • Co-author, “Practice note: Brexit: the implications for data protection,” PLC Magazine, September 2018
  • Co-author, "GDPR one year on: taking stock,” PLC Magazine, May 2019
  • Co-author, “Legitimate interests under the GDPR: flexibility, but at a cost,” PLC Magazine, July 2018
  • Co-author, “Data Protection Bill: aspiring to equivalence,” PLC Magazine, September 2017
Insights

Select Publications

  • Co-author, “CMA's Actions Signal New Spotlight on UK Consumer Law,” Law360, May 18, 2026
  • Co-author, “EDPB Issues First Guidelines on the Interplay Between the Digital Services Act and the GDPR,” Wilson Sonsini Alert, September 22, 2025
  • Co-author, “European Commission Publishes DSA Guidelines on the Protection of Minors Online,” Wilson Sonsini Alert, July 23, 2025

  • Co-author, “Consumer Protection in the UK: Update on Reforms Taking Effect in 2025 and 2026,” Wilson Sonsini Alert, July 11, 2025
  • Co-author, “UK Introduces New Legislation Amending Privacy Laws,” Wilson Sonsini Alert, July 1, 2025

  • Co-author, “The UK’s Online Child Safety Duties Are Coming into Force: Steps to Take Now,” Wilson Sonsini Alert, April 25, 2025
  • Co-author, “Upcoming Reporting Obligations Under the EU Digital Services Act,” Wilson Sonsini Alert, February 10, 2025
  • Co-author, “Ransomware Attacks: UK Government Proposes Ransom Payment Ban and Mandatory Notification Requirements,“ Wilson Sonsini Alert, January 24, 2025
  • Co-author, “The UK’s Online Safety Regime Is Coming into Force: Steps to Take Now,“ Wilson Sonsini Alert, January 23, 2025
  • Co-author, “Increased Focus on the Protection of Minors and Age Verification in the EU and the UK,” Wilson Sonsini Alert, January 9, 2025
  • Co-author, "UK Brings Forward Bill to Reform UK Privacy Laws," Wilson Sonsini Alert, November 5, 2024
  • Co-author, “Online Safety Act 2023: A Revolution in Regulation,” PLC Magazine, December 2023
  • Co-author, “Unlocking the Data Transfer Dilemma: the EU-US Data Privacy Framework,” Infosecurity Magazine, September 2023
  • Co-author, “UK and US Data Transfer Framework: Bridging the Gap,” PLC Magazine, June 2023
  • Co-author, “UK: A new recipe for lighter cookies,” Data Guidance, November 2021
  • Co-author, “Measuring global diversity and inclusion: the art of the possible,” International Association of Privacy Professionals, November 2021
  • Co-author, “Data protection reform: setting the course for a new direction,” PLC Magazine, September 2021
  • Co-author, “Selling adequacy after sunset,” Global Data Review, August 2021
  • Co-author, “M&A in the technology sector: understanding the key issues,” PLC Magazine, September 2019
  • Co-author, “Cookies and Adtech: the ICO’s ambitious recipe for compliance,” Society for Computers and Law, August 2019
  • Co-author, “Data subject access requests – three illuminating cases,” PDP Journals, July 2019
  • Co-author, “Practice note: Brexit: the implications for data protection,” PLC Magazine, September 2018
  • Co-author, "GDPR one year on: taking stock,” PLC Magazine, May 2019
  • Co-author, “Legitimate interests under the GDPR: flexibility, but at a cost,” PLC Magazine, July 2018
  • Co-author, “Data Protection Bill: aspiring to equivalence,” PLC Magazine, September 2017
Focus Areas
  • Artificial Intelligence and Machine Learning
  • Data, Privacy, and Cybersecurity
Recent Insights
Alerts
UK Announces Social Media Ban and Broader Online Restrictions for Users Under 16
On June 15, 2026, the UK government announced plans to introduce a social media ban for users under 16 (under-16s), alongside restrictions on features deemed harmful to minors, such as livestreaming and messaging functions, for a wider range of online services, including those in the gaming sector. These measures, which may require platforms active in the UK market to significantly alter their operations, are expected to come into force in Spring 2027.
Learn More
Alerts
European Commission Publishes Proposal for Act to Reduce Reliance on Foreign Cloud and AI
On June 3, 2026, the European Commission (EC) released its first draft of a proposed Cloud and AI Development Act (Proposal or CADA), marking a significant step forward in the EU’s efforts to strengthen its digital infrastructure and reduce strategic dependence on non-EU cloud providers.
Learn More
View All
Recent Events
Speaking Engagements
2026 Digital Platform Regulation and Compliance Summit
The Digital Platform Regulation and Compliance Summit will be held March 24–25 at the Novotel London West. Wilson Sonsini Of Counsel Tom Evans will join the panel, “Unifying Compliance Across a Fragmented Regulatory Landscape.” The discussion will address the growing overlap among the DSA, DMA, OSA, AI Act, NIS2, and DMCC, and explore how organizations can move beyond siloed approaches to build a unified, global compliance framework. For more information and to register, please visit the event website.
Learn More
Affiliated Programs
IAPP UK Intensive 2026
On Thursday, February 26, from 14:15–15:15 GMT, Wilson Sonsini’s Tom Evans will moderate a panel at IAPP UK Intensive titled “Scaling Compliance with the Business: Building Programmes that Support Growth.” Joined by John O’Brien, Head of Legal, Data Protection and AI at Revolut, and Samantha Sayers, Global Head of Privacy, Risk and Compliance at Bolt, the panel will explore how in-house teams can design and evolve compliance programs that scale effectively as organizations grow and complexity increases. To register for the event, please visit the website. 
Learn More
View All
  • people
  • insights
  • about us
  • careers
  • Binder
  • Alumni
  • Mailing List Signup
  • Client FTP Portal
  • Privacy Policy
  • Terms of Use
  • Accessibility
WSGR logo
Twitter
LinkedIn
Facebook
Instagram
Youtube
Copyright © 2026 Wilson Sonsini Goodrich & Rosati. All Rights Reserved.