A commercial data relationship
A company sharing information with a customer, supplier or provider. Privacy work reads how that information is used; the agreement and any regulatory position sit beside it where they belong.
Legal
Privacy & Data Protection
Businesses collect, use and share information as part of ordinary operations. Millcorn helps identify the legal work around that activity and coordinate related contractual, regulatory, employment or international questions where the matter requires it.
Start with the data activity
The legal position follows what the business is doing with information.
Privacy work begins with the activity — not with a document. Personal and commercial information is handled as part of real operations.
- Collecting information from customers or users
A business taking in information in order to operate a product, a service or a relationship.
- Using information inside a service or process
Information already held is put to work as part of how the business actually runs.
- Sharing information with a provider or partner
A supplier, platform or commercial counterpart receives information as part of the arrangement.
- Handling workforce information
Employee and workforce information is collected and used as part of operating the organisation.
- A transaction involving information
A deal, investment or commercial change includes information that already sits with the business.
- Operating across jurisdictions
Information is used where clients, vendors, employees or the business itself sit in more than one place.
How information moves
Privacy questions arise along the path of information through the business.
The work is to see where information is taken in, how it is used, who can reach it, and where it is handed on — not to treat privacy as a separate file.
- Collect
Where information first enters the activity.
- Use
The purpose it is put to inside the business.
- Share
Where it is given to another party as part of the arrangement.
- Access
Who inside the organisation can see or act on it.
- Retain
How long it is held, and on what basis.
- Control
What decisions keep that handling within the intended use.
Obligations follow the use
Different activities create different legal and organisational questions.
The obligation is read from the use — what information is involved, who handles it, and what surrounds that activity. It is not a checklist copied onto the business.
- What information
Personal information, commercial information, or both — and how they sit in the activity.
- Who uses it
The people, teams or counterparties who actually handle the information.
- Why it is used
The business purpose the handling is meant to serve.
- Who receives it
Providers, partners or other parties to whom information is given.
- The surrounding context
The contractual or regulatory setting that already sits around the activity.
- The controls required
The decisions that keep collection, use, sharing and access aligned with that purpose.
When the data position changes
Privacy questions often arise when the activity itself changes.
A new product, a new provider, a transaction or an expansion can alter how information is used. So can a moment when that handling comes under scrutiny.
- A new product or service
Information is collected or used in a way the existing activity did not cover.
- A new vendor or provider
Another party now receives or handles information on the business’s behalf.
- A transaction or acquisition
Information already held moves with the company, the assets or the people.
- An expansion of operations
The same information activity now sits in more than one place.
- A workforce change
How employee information is collected, used or shared has shifted.
- When handling comes under scrutiny
The way information is used has changed, or is being examined.
Cross-border information
Information can move faster than the legal structure around it.
Clients, vendors, employees or operations may sit in more than one jurisdiction. Privacy work reads how information is used across those places and holds the related contractual, regulatory and operational questions as one. Capability is assessed against the matter — not assumed as universal coverage.
- Information across jurisdictions
The same activity may use information where more than one legal environment applies.
- People and operations in different places
Customers, vendors or the workforce may sit elsewhere than the company itself.
- Coordinated positioning
Where local rules differ, the work is to hold one position — not to copy a document across a border.
How Millcorn helps
Understand the activity, then the work it requires.
You describe how information is used. Millcorn maps the legal and commercial context, identifies what needs to be addressed, and holds related disciplines as one matter. Regulated legal work is carried out by appropriately qualified professionals or firms where required.
- 01
Understand the activity
What the business is actually doing with information, and why.
- 02
Identify the information involved
What is collected, used, shared or held — and who is involved.
- 03
Map the legal and commercial context
The contractual, regulatory, employment or international questions that sit around that use.
- 04
Coordinate professional work
Appropriate legal work is organised; related questions stay in the same relationship.
- 05
Keep connected work aligned
As the business changes, the information activity continues to be read as one matter. The client relationship stays with Millcorn.
Connected work
One information activity. Several disciplines.
Three existing Millcorn patterns show how privacy work sits with contracts, regulatory, employment, corporate and transaction services. These are coordinated matters, not case studies.
Workforce information
A business handling information about the people who work for it. Privacy work reads that handling; the employment relationship itself remains a separate legal question.
- LegalPrivacy & Data Protection
- LegalEmployment & Labor
An expansion or a transaction
A company changing where or how it operates, or acquiring a business that already holds information. Privacy work reads the information activity; the corporate change and the transaction process sit with it — they are not the same work.
- LegalPrivacy & Data Protection
- LegalCorporate & Commercial
- Business ServicesTransactions & M&A
Working with Millcorn
One relationship. The privacy work the activity actually requires.
The information activity is understood first. Privacy is considered alongside the commercial reality. Appropriate professional work is coordinated. Related contracts, regulatory, employment or international questions stay visible. Next steps remain clear as the business changes.
Millcorn coordinates client relationships and professional services. Regulated services are provided by appropriately qualified professionals and firms where required. Millcorn is not itself a law firm, CPA firm, investment adviser or insurance broker.
Tell us what you need.
Start with how information is used. We will identify the privacy work required, and any related disciplines.