Steven Hadwin

Steven Hadwin


Steven specialises in cyber risk, with a particular focus on cyber risk management, incident response and post-incident disputes.

He advises clients on the implications of cybersecurity incidents from a legal, regulatory and liability risk perspective, and has extensive experience of regulatory investigations following incidents (including investigations and enforcement action by the UK ICO and other European data protection regulators).

Steven has particular experience of advising clients in the context of cyber extortion (malware and data theft-led) and is interested in the ongoing debate around potential legal and regulatory reform in this area.

He also advises clients on a range of insurance and insurable risk issues, both with a cyber focus and more broadly.

Steven maintains an extensive network of contacts in the cybersecurity and risk management industries and is focussed on encouraging public/private and international collaboration in order to build greater cyber resilience across sectors and industries.



Pro bono

Director and trustee of Petals Charity

Published Work

Wong et al (2024); Cyber Security: Law and Guidance, 2nd Edition; London; Bloomsbury 



England & Wales, 2012


BA (Hons), Law with French, Newcastle University, 2004-2008 

Université Montpellier I, 2006-7 

Legal Practice Course, BPP Law School, 2008-2009
A&O Shearman was formed on May 1, 2024 by the combination of Shearman & Sterling LLP and Allen & Overy LLP and their respective affiliates (the legacy firms). Any matters referred to above may include matters undertaken by one or more of the legacy firms rather than A&O Shearman.