Expertise

Kellie leads a team that advises on a wide variety of information, communications and technology (ICT) mandates across the Middle East region, including technology procurement, outsourcing, complex services and digital transformation projects, as well as data governance, cyber security and regulatory technology and telecoms matters.

She acts as trusted advisor to some of the world's best known and most innovative companies, including regulated entities operating in the healthcare and life sciences and financial services sectors, where she combines her technical and commercial expertise to find practical ways to manage risk. As the digitisation agenda leads to increasing sector convergence, she is well-placed to advise established companies as well as those leveraging disruptive business models how to manage the associated legal issues.

Experience

Her indicative experience includes advising:

Technology Transactions

  • A GCC technology vendor on the $700 million design, build and exclusive lease agreement for a 16 MW Tier III data centre facility.
  • A GCC telecoms operator on a carve-out of its data centre assets in 11 jurisdictions (> $1 billion).
  • A multinational telecoms operator on a managed services agreement in connection with the sale and leaseback of the entirety of a competitor’s infrastructure of telecoms towers in a GCC country (value: > $3 billion).
  • A Middle Eastern telecoms operator on the $700 million design, build and exclusive lease agreement for a 16 MW Tier III data centre facility.

Data Advisory

  • An outsourced service provider on the data protection compliance issues associated with its appointment as strategic IT partner on a project (value: > $40 million).
  • Several leading online service providers and an industry trade association on strategic policy projects in the GCC region, including on topics such as the regulation of digital content, cross-border data transfers, cloud computing and data processing in the financial services and healthcare & life sciences sectors.
  • Several leading pharmaceutical and MedTech companies on product and service rollouts and the compliance of those services with regional technology, data protection and cybersecurity laws.
  • Several multi-national banks on ransomware attacks and its regulatory obligations under regional laws.

Healthcare & Life Sciences Sector

  • Medical device manufacturers on the roll out of innovative tools including robotic surgery, smart implants and personalised biotechnological therapies like CAR-T cell therapy, which can be engineered using a patient's own plasma to treat cancer.
  • A pharmaceutical manufacturer on one of the region's first clinical trials – a phase 3 trial for a proprietary drug which is used to create neuro-degenerative conditions, including Alzheimer's. The next phase of that project, if successful, will be to commercialise the drug and put in place domestic manufacturing arrangements.
  • Advising the US operator of a pharmacy management system on data rights and cross-border transfer issues in connection with a joint venture dispute concerning its core PMS software (value: > $400 million)
  • Several leading pharmaceutical and MedTech companies on product and service rollouts and their compliance with regional technology and data protection laws.
  • A US pharmaceutical manufacturer on a strategic project to map the data protection and cyber security requirements that apply across various countries in the Gulf to inform their IT infrastructure and product configurations and settle their product launch timetable for several years.

Financial Services Sector

  • Several Saudi investment and retail banks on their data protection compliance programs, including contract remediation, policy roll-out and strategic risk mapping and remediation.
  • A GCC bank on its appointment as exclusive provider of e-payment and remittance services to more than 50 government entities (value: > $200 million).
  • A GCC bank on the contractual framework to support the rollout of the third generation of the UAE Government's domestic card scheme, e-dirham.
  • A multi-national bank on a ransomware attack and its regulatory obligations under regional laws.

Retail & Consumer Sector

  • Trusted advisor to a consumer-facing retail and food delivery platform, advising on its grocery supply arrangements, rider authentication program, regulator engagement, competition law and privacy issues, amongst other matters.
  • Advising a tech-powered, multi-brand, cloud kitchen restaurant business on developing, from scratch, its franchise documentation to commence international franchising of its proprietary smart kitchen software and brands, as a pilot for global roll-out.
  • A luxury brand house on the roll-out of its fraud prevention software in the region and assessing data protection law considerations.

Transportation Sector

  • A software developer on the delivery of a digital transformation project for the national airline of a Gulf country, including agile software development and the licensing and customisation of a unified travel sales, distribution and management system.
  • A global technology vendor on a customer service BPO for a Gulf country's national airline.
  • A budget Gulf airline on a data breach and on its regional reporting obligations.
  • Several leading car manufacturers (US, EU and Japan headquartered) on the regulatory requirements and privacy considerations associated with the launch of connected vehicles, lidar technology, e-call functionality and in-built customer support services in the Middle East region.
  • The manufacturer of autonomous vehicles on its participation in the Dubai sandbox for vehicle testing.
  • A GCC government-owned entity on a project to introduce electric vehicle charging infrastructure.

Advanced Manufacturing

  • A GCC government-owned company on the procurement and implementation of software in connection with the digital transformation and optimisation of its advanced manufacturing process (value: > $300 million).
  • A GCC government-owned weapons manufacturer on its handgun manufacturing arrangements, including licensing of IP to support the tooling of a domestic manufacturing facility.
  • A US defence contractor on the supply of equipment / goods to a GCC government and the management of its associated off-set commitments.

Technology Sector

  • Global online service providers on all ay-to-day activities and digital product development and roll-outs across the Gulf and wider Middle East region, including strategic on policy matters and government collaboration, technology regulatory issues, notice and takedown requests, engagement with regulators, competition law, data privacy, data localisation, cyber security, virtual assets, e-gaming, content regulation and age ratings and a host of other matters. 
  • A multinational telecoms operator on a managed services agreement in connection with the sale and leaseback of the entirety of a competitor’s infrastructure of telecoms towers in a GCC country (value: > $3 billion).
  • A GCC telecoms operator on a carve-out of its data centre assets in 11 jurisdictions (value: > $1 billion).
  • Market diligence for a leading SVOD provider in connection with its launch across the Gulf. 

Public Sector

  • A GCC government entity on the development of a legislative framework for the adoption of a digital identity system. 
  • A GCC government-owned company on the procurement and implementation of software in connection with the digital transformation of its manufacturing process (value: > $300 million).
  • Advising a technology vendor on a project to supply and implement 'iron dome' technology for a GCC government to protect its critical assets.
  • A cybersecurity firm on its appointment to conduct penetration testing of a GCC government's defence systems, including missile launch systems.
Education
  • University of Glasgow, LLB with French, 2005
  • Glasgow Graduate School of Law, Diploma in Legal Practice, 2006
Publications
  • TechRadar, DIFC brings its new data protection law in accordance with international best practice, 15 July 2020
  • The Oath, Keeping up with the IoT Boom, August 2019
  • Gulf Times, Data Protection Law in Qatar, 29 January 2017
Languages
  • French - good command
Testimonials

"Kellie has in-depth knowledge of the fast-evolving privacy laws and regulations in the Middle East, including the regulatory developments and priorities of the authorities."

"In this complex landscape she is able to provide to-the-point, actionable and risk-based advice taking into account the specific aspects of our business."

"She has added infinite value to me in my efforts to de-risk and future-proof the business."