Emma Wright
Overview
Emma is a market-leading attorney who helps clients translate regulatory frameworks related to emerging technologies into commercial and practical reality. A partner in Crowell’s London office and a member of the Privacy and Cybersecurity Group, Emma is renowned for her adept handling of issues related to incorporating or refreshing technology into business processes and the massive amount of data that businesses generate and collect, including global privacy, cybersecurity, artificial intelligence (AI), telecommunications, the cloud, and convergence.
Career & Education
- University of Leeds, L.L.B., (Hons), Law, 1997
- Inns of Court School of Law, Hardwicke Scholar, Bar Vocational Course, Very Competent
- England and Wales
- Co-founder and Director, Interparliamentary Forum on Emerging Technologies
- Founding Member, UNESCO Women4EthicalAI
Emma's Insights
Client Alert | 7 min read | 03.23.26
In a significant ruling on the application of data protection law in the United Kingdom, on 19 February 2026, the UK’s Court of Appeal (CA) ruled in favour of the UK Information Commissioner (ICO) in its appeal against the decision of the Upper Tribunal (UT) in the case of DSG Retail Ltd v The Information Commissioner [2026] EWCA Civ 140. This ruling clarifies the scope of data controllers’ security obligations with pseudonymised personal data and confirms that a controller’s duty to safeguard personal data is not diminished merely because a cyber attacker who exfiltrates that data would be unable to re-identify the individuals concerned.
Press Coverage | 01.14.26
U.K. Regulators Move To Curb AI Nudification Tools As Scrutiny Of Grok Grows
Publication | 12.15.25
International Comparative Legal Guide - Telecoms, Media & Internet 2026
Client Alert | 10 min read | 12.01.25
Recognition
- Thomson Reuters: Stand-out Lawyer, 2026
- Chambers UK: Telecommunications, UK-wide, 2016–2025
- Chambers UK: Information Technology & Outsourcing, London (Firms), 2024–2025
- The Legal500 UK: Leading Partner, Technology, Media, and Telecoms: Artificial Intelligence
- The Legal500 UK: Leading Partner, Technology, Media, and Telecoms: IT and Telecoms
- The Legal500 UK: Leading Partner, Industry Focus: TMT
- The Legal500 UK: Risk Advisory: Data Protection, Privacy, and Cybersecurity
- The Legal500 UK: Technology, Media, and Telecoms: Fintech: Corporate and Commercial
- ComputerWeekly’s Top 20 Most Influential Women in UK Tech, 2022–2024
- Women & Diversity in Law Summit and Award, Law Firm Leader of the Year (Small-to-Medium Sized Practice), 2024
- Digital Revolution and Forward Ladies Leadership Awards, Transformational Leader of the Year and Woman of the Year, 2023
- CogX Awards, Global Goals Impact, 2023
Emma's Insights
Client Alert | 7 min read | 03.23.26
In a significant ruling on the application of data protection law in the United Kingdom, on 19 February 2026, the UK’s Court of Appeal (CA) ruled in favour of the UK Information Commissioner (ICO) in its appeal against the decision of the Upper Tribunal (UT) in the case of DSG Retail Ltd v The Information Commissioner [2026] EWCA Civ 140. This ruling clarifies the scope of data controllers’ security obligations with pseudonymised personal data and confirms that a controller’s duty to safeguard personal data is not diminished merely because a cyber attacker who exfiltrates that data would be unable to re-identify the individuals concerned.
Press Coverage | 01.14.26
U.K. Regulators Move To Curb AI Nudification Tools As Scrutiny Of Grok Grows
Publication | 12.15.25
International Comparative Legal Guide - Telecoms, Media & Internet 2026
Client Alert | 10 min read | 12.01.25
Insights
U.K. Regulators Move To Curb AI Nudification Tools As Scrutiny Of Grok Grows
|01.14.26
Compliance Week
U.K. To Introduce Mandatory Ransomware Reporting, Raising Risk of ‘Box-Ticking’ Compliance
|09.22.25
Compliance Week
DPRK Threat Actors Target European Drone Makers
|10.28.25
Crowell & Moring’s Transportation Law: Moving Forward
Emma's Insights
Client Alert | 7 min read | 03.23.26
In a significant ruling on the application of data protection law in the United Kingdom, on 19 February 2026, the UK’s Court of Appeal (CA) ruled in favour of the UK Information Commissioner (ICO) in its appeal against the decision of the Upper Tribunal (UT) in the case of DSG Retail Ltd v The Information Commissioner [2026] EWCA Civ 140. This ruling clarifies the scope of data controllers’ security obligations with pseudonymised personal data and confirms that a controller’s duty to safeguard personal data is not diminished merely because a cyber attacker who exfiltrates that data would be unable to re-identify the individuals concerned.
Press Coverage | 01.14.26
U.K. Regulators Move To Curb AI Nudification Tools As Scrutiny Of Grok Grows
Publication | 12.15.25
International Comparative Legal Guide - Telecoms, Media & Internet 2026
Client Alert | 10 min read | 12.01.25




