He advises clients on the implications of cybersecurity incidents from a legal, regulatory and liability risk perspective, and has extensive experience of regulatory investigations following incidents (including investigations and enforcement action by the UK ICO and other European data protection regulators).

Steven has particular experience of advising clients in the context of cyber extortion (malware and data theft-led) and is interested in the ongoing debate around potential legal and regulatory reform in this area.

He also advises clients on a range of insurance and insurable risk issues, both with a cyber focus and more broadly.

Steven maintains an extensive network of contacts in the cybersecurity and risk management industries and is focussed on encouraging public/private and international collaboration in order to build greater cyber resilience across sectors and industries.