

AA Partners advises SaaS founders, data-heavy businesses, and companies deploying AI on the practical legal questions that come with handling customer data, licensing software, and protecting intellectual property. The Of Counsel practice combines academic depth (ongoing doctoral research in AI data protection) with day-to-day commercial advisory.
Book a data + IP consultationWhere the data + IP practice helps clients move fast without breaking rules.
UK GDPR and EU GDPR compliance programmes, data-protection impact assessments, breach response, data-subject-rights handling, international data transfer arrangements.
IP portfolio audits, structuring IP ownership across group companies, in-bound and out-bound licence agreements, software and SaaS terms, IP assignment in employment and consultancy contracts.
Practical advisory for companies deploying AI: training-data sourcing, model output rights, customer-side AI clauses, EU AI Act implications, and the questions that do not have settled answers yet.
Six service lines within the data + IP practice.
Each line is led by Özgür Milletsever (Of Counsel) with partner oversight for matters that touch corporate or M&A practice areas.
Compliance programmes, privacy notices, data-processing agreements, data-protection impact assessments, registration with the ICO, employee training materials.
Initial triage when a breach occurs, drafting and submitting Article 33 notifications to the ICO, coordinating customer notifications, and managing any ensuing ICO investigation.
Auditing IP ownership across group companies, restructuring to consolidate IP in the right vehicle, ensuring assignment paperwork is in place for contractor and employee contributions.
Customer-side SaaS terms, MSAs and DPAs, supplier-side software-licence agreements, open-source compliance review, escrow arrangements.
Data-sharing agreements between organisations, research collaboration agreements, joint controllership arrangements, data-trust structures.
Training-data sourcing questions, model output ownership, customer AI clauses, EU AI Act readiness, transparency obligations under emerging regimes.



Compliance is something a business does, not something it has on a shelf. We build practical programmes: privacy notices customers actually read, DPIAs that capture real risks, vendor agreements that hold under scrutiny, and a breach-response playbook the team can actually execute under pressure.
Discuss complianceLicence agreements that protect the IP without making the deal too painful to sign. Software and SaaS terms balanced for both sides. IP assignment paperwork that holds when a contractor leaves on bad terms. We negotiate to a deal — not to a perfect document that never gets signed.
Discuss licensing
CURRENT + FORWARD-LOOKINGAI law is still forming. Training-data rights, model output ownership, transparency obligations under the EU AI Act — many of these questions do not have settled answers. We advise on what is reasonable given current authority, flag where the law is moving, and help clients make defensible commercial decisions.
Discuss AI advisoryCombining academic and commercial depth in one practice.
Of Counsel Özgür Milletsever is undertaking doctoral research on AI and data protection — ongoing depth on the questions the industry is still settling.
Both UK GDPR (post-Brexit) and EU GDPR matters handled. We track divergence on both sides as it develops.
Compliance + breach response on data, commercial contracts on IP, and emerging-law advisory on AI deployments.