Joshua Curzon

Joshua is a member of Kennedys’ cyber and data risk team based in London. Joshua specialises in data protection advice and cyber incident response, and advises both corporate and insurer clients across all sectors. 

Joshua has extensive experience advising clients on the spectrum of data protection matters, including the controller/processor relationship, contractual issues and data subject access requests (DSARs). Joshua regularly works with clients who have received DSARs in the context of dispute resolution, and advises clients on practical solutions throughout the process.

In addition to his work on data protection matters, Joshua advises clients on their response to cyber incidents, helping clients address their legal and regulatory obligations. Joshua has worked on cyber incidents of all sizes, including complex multijurisdictional ransomware incidents. He has a keen awareness of stakeholder management concerns and advises on strategic risks.

Qualifications:

• Qualified in England and Wales in 2025