From 1st July the Council of Mortgage Lenders is integrated into a new trade association, UK Finance. For the time being, all UKF mortgage information will continue to be published on this website, and UKF member-only mortgage information will only be available here.

UK Finance represents around 300 firms in the UK providing credit, banking, markets and payment-related services. The new organisation takes on most of the activities previously carried out by the Asset Based Finance Association, the British Bankers’ Association, the Council of Mortgage Lenders, Financial Fraud Action UK, Payments UK and the UK Cards Association. Please go to for wider content and updates from UK Finance.

  1. Home
  2. Events
  3. Mortgages and data protection regulation

Mortgages and data protection regulation


27 September 2016

Time: 9:00am – 1:30pm
Venue: CML Bush House, London
Price: £145 members
£145 associates
£199 non-members
Mortgages and data protection regulation

About this event

This event explored General Data Protection Regulation (GDPR) and its implications for lenders.

This event was aimed at:

Those who deal with data protection issues in their day-to-day roles.

Topics included:

  • An overview of the General Data Protection Regulation (GDPR) and its implications for the lending market
  • UK applications of the new guidance
  • Practical implications of the GDPR - changes to processes
  • Practical implications of the GDPR - financial crime

Key takeaways from this event

  • Be prepared! - whilst the changes don't take effect until 2018, there is no transition period and the regulation applies to data retained now, as well as to future collection.
  • Have a Data Subject Access Request and a Privacy Impact Assessment (PIA) framework in place.
  • There needs to be awareness across third party relationships and partners. 
  • Outsources and processors need to have a mutually compliant environment and an annual data audit should be performed.
  • Customer profiling is important.
  • Do you need to retain and gather the data that you currently do? Remember that 'less is more' and try to refine the process where possible.
  • Be clear and transparent on the reasons for harnessing the data and the intended future uses and purposes of it.

*This event was closed to press*


0900 - 0930


Registration and refreshments

0930 – 0940  

Welcome and introduction 
Sheryl Fernando, Associate and Commercial Relations Manager, Council of Mortgage Lenders 

0940 - 1030  

An overview of the General Data Protection Regulation (GDPR) and its implications for the lending market
Paula Barrett, Partner, Eversheds 

1030 - 1110  

Practical implications of the GDPR – financial crime
Alison Deighton, Partner, TLT 

1110 - 1130    Refreshments

1130 - 1215   Practical implications of the GDPR – changes to processes

Vikki Hoyle, Senior Associate, Walker Morris 

1215– 1315  

Lunch and event close

Confirmed speakers

Paula Barrett

Partner, Eversheds

Paula Barrett leads Eversheds international privacy and information law practice. Paula is recommended by Chambers as a leading individual in the field of Data Protection and cyber security, and has considerable expertise in helping clients in the financial services sector plan and address their compliance in this area and manage the interplay with other regulatory and operational requirements. 








Alison Deighton

Partner, TLT LLP

Alison Deighton is a Partner and head of TLT's Data Protection & Privacy team. She advises banks and other financial institutions on all aspects of information law. 

Alison has extensive experience advising clients on data protection compliance issues, including drafting privacy notices and policies, delivering training, advising on international data transfers, advising on marketing compliance issues, dealing with ICO investigations, conducting audits, managing data breach incidents and advising on data sharing arrangements.

She also has advised a wide range of financial institutions on the new General Data Protection Regulation and leads TLT's GDPR Practical Thinktank, which helps senior in-house lawyers and data protection professionals implement the new regulation.

Alison is a member of the National Association of Data Protection Officers and the International Association of Privacy Professionals. 

Vikki Hoyle

Senior Associate, Walker Morris LLP

Vikki Hoyle is an expert in data protection.  Her experience includes conducting data protection audits and website compliance reviews, including privacy policies and cookies. She also advises on transatlantic data transfers including model contract clauses, Privacy Shield and the practical implications of these for EU and US businesses.


Council of Mortgage Lenders

3rd Floor Bush House, North West Wing
London WC2B 4PJ

Nearest tube stations:

Holborn (Piccadilly and Central lines)
Charing Cross (Bakerloo and Northern lines)
Waterloo (Jubilee, Waterloo & City, Northern and Bakerloo lines)

Nearest overground station:

Waterloo (Connects to Jubilee, Waterloo & City, Northern and Bakerloo lines)