Ash Costello

With deep experience across GDPR, CCPA, HIPAA, COPPA, UK data laws and the fast-evolving patchwork of US state privacy regimes, I help organisations navigate regulatory complexity while adopting and scaling new technologies. My legal practice focuses on multi-jurisdictional corporate finance, banking and finance law, and generalist in-house legal counsel services, including advising on regulatory projects, insurance, audit, corporate governance, and commercial contract negotiation. I help clients navigate complex legal frameworks and achieve compliance across the UK, UAE, and other global markets.

Prior to joining Arbor, I advised a wide range of multinational businesses, digital platforms, financial services firms, healthcare organisations and emerging tech companies on data governance, cybersecurity compliance, incident response and the management of global data flows.

I have worked extensively on digitisation and AI-driven projects, supporting clients as they develop, deploy and commercialise advanced technologies across multiple jurisdictions.