Sarah Birkett

Partner

Sarah Birkett is my main point of contact and the services she provides are outstanding. Her advice is always well considered and commercially practical.

— Beaton Top 200 Client Survey – Industrials sector client testimonial (2023)

Emailsarah.birkett@dlapiper.com

Call+61 3 9274 5464

Melbourne

About

Areas of FocusTechnology Data, Privacy and Cybersecurity Technology and Commercial Transactions

Professional QualificationsBarrister and Solicitor of the Supreme Court of VictoriaSolicitor of the Senior Courts of England and Wales

EXPERIENCE

Conducting privacy audits for multinational businesses, including a global food and beverage manufacturer, pharmaceutical companies and a global consumer goods manufacturer. This involves assessing privacy and data handling practices through tailored questionnaires and workshops, and delivering practical, risk-based recommendations to enhance compliance and strengthen organisational data governance.
Advising a global reinsurer on management of a data leakage incident involving sensitive commercial and personal data. This included liaising with insurance and privacy regulators in multiple jurisdictions.
Advising a security and facility services company on its response to a ransomware attack involving large-scale data exfiltration. This included managing regulatory engagement and notification strategies, and supporting the client in responding to and resolving complaints from affected individuals, whilst seeking to minimise regulatory exposure and operational disruption.
Conducting privacy impact assessments for a range of private and public sector organisations, helping clients to identify and mitigate privacy risks arising from the introduction of complex technology solutions and new business processes.
Co‑authoring a report with the British High Commission on the regulatory and procedural challenges associated with overseas transfers of personal data in the absence of an Australia–UK adequacy decision. This included working with a range of government, industry and international stakeholders to assess current barriers and outline the potential impact of reform.
Advising a range of national and international clients on compliance with direct marketing and spam laws across omni-channel campaigns, including correspondence with the regulator, the Australian Communications and Media Authority (ACMA), following consumer complaints.
Conducting a bespoke cyber incident simulation workshop for a global pharmaceutical company.
Advising insurance companies on the application of Australian Prudential Regulation Authority (APRA) regulations relating to information security and operational resilience, and drafting and negotiating commercial terms relating to data sharing.
Providing advice on the application of privacy and surveillance laws including in respect of workplace surveillance schemes and to the State of Victoria in respect of its COVID-19 response.