Global Applicant Privacy Notice

This notice applies to all external candidates applying for a role with any of the Mayer Brown Practices and Departments listed below (each a “Practice” or “Department” and together the “Mayer Brown Practices and Departments”, “we”, “us”, “our”). This includes all vacancies including partner hires and trainee positions through our graduate recruitment process. This notice does not form part of any contract of employment, agreement, or other contract to provide services. The Mayer Brown Practices and Departments to which this notice applies are:

Mayer Brown LLP, a limited liability partnership established in Illinois, USA including its branch offices operated in Germany and Dubai International Financial Centre (DIFC);
Mayer Brown Europe-Brussels LLP, a limited liability partnership established in Illinois, USA;
Tauil & Chequer Advogados, a Brazilian law partnership with which Mayer Brown is associated;
Mayer Brown International LLP, a limited liability partnership incorporated in England and Wales;
Mayer Brown, a SELAS established in France;
Mayer Brown Services SAS, established in France;
Mayer Brown PK Wong Pte. Ltd., a limited liability company incorporated in Singapore (UEN 202235532E), being a licensed joint law venture between Mayer Brown (Singapore) Pte. Ltd. (UEN 201114070Z) and PK Wong LLC (UEN 200401587Z);
Mayer Brown Hong Kong LLP, a limited liability partnership established in Hong Kong; and
Mayer Brown Gaikokuho Jimu Bengoshi Jimusho, the Mayer Brown practice established in Japan.

We may update this notice at any time. It is important that you read this notice so that you are aware of the personal information we hold about you, how we will collect the information, with whom and under what circumstances we may share or otherwise use the information.

WHAT IS THE PURPOSE OF THIS DOCUMENT?

Each Mayer Brown Practice and Department is committed to protecting the privacy and security of your personal information. This notice describes how we collect and use personal information about you during the recruitment process, in accordance with applicable data protection legislation, including (as relevant to the Practice or Department to which you are applying) the UK General Data Protection Regulation (“UK GDPR”), the European Union General Data Protection Regulation (Regulation (EU) 2016/679) (“EU GDPR”), DIFC Law Number 5 of 2020, Brazil’s Data Protection General Law (Lei Geral de Proteção de Dados, “LGPD”), the Personal Data Protection Act 2012 in Singapore (“PDPA”), the Personal Data (Privacy) Ordinance (Cap. 486) in Hong Kong (“PDPO”), the Act on the Protection of Personal Information in Japan (“APPI”), and any other applicable data protection or privacy laws in the jurisdictions in which the Mayer Brown Practices and Departments operate. If you are a California resident, you should read this notice together with our CCPA Applicant Privacy Notice.

Each Mayer Brown Practice and Department listed above is a data controller (or the equivalent under applicable local law) in respect of the personal information of candidates applying to that Practice or Department. This means that the relevant Practice or Department is responsible for deciding how it holds and uses personal information about you. Where you apply to more than one Practice or Department, or where your personal information is shared between Practices and Departments in connection with your application, each Practice or Department that processes your personal information will be a data controller in respect of that processing. We are required under applicable data protection legislation to notify you of the information contained in this privacy notice.

DATA PROTECTION PRINCIPLES

We will comply with all applicable data protection law. This states that the personal information we hold about you must be:

Used lawfully, fairly, and in a transparent way;
Collected and processed only for specific, explicit, and legitimate purposes;
Adequate, relevant, and limited to the purposes about which we have told you;
Accurate and kept up to date;
Kept only as long as necessary; and
Kept securely.

WHAT INFORMATION DO WE HOLD ABOUT YOU DURING THE RECRUITMENT PROCESS?

Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

In some jurisdictions where Mayer Brown recruits, there are also “special categories” of more sensitive personal information which require a higher level of protection.

For the purposes of applicable data protection laws in the United Kingdom, European Union, Brazil, and DIFC, this is personal information which reveals or contains:

Racial or ethnic origin;
Political opinions;
Religious and philosophical beliefs;
Trade union membership;
Genetic data;
Biometric data;
Health data;
Sex life or sexual orientation; and
Criminal record (DIFC).

For the purposes of applicable data protection laws in Japan, this is your race, creed, social status, medical history, criminal record, fact of having suffered damage by a crime, or other descriptions which require special care when handling such data.

In connection with your application, we will collect, store, and use the following categories of personal information about you:

All details included in your CV, covering letter, or application, such as your education and employment history;
Personal contact details such as your name, address, telephone numbers and personal email address;
Any information you, or a third-party provider, provides to us during the recruitment and selection process, including test results if these form part of the selection process;
Feedback on your application and any subsequent interview notes; and
Photographs if provided.

We may also collect, store and use the following “special categories” of more sensitive personal information, if it is legally permissible for us to request such information under applicable laws and you voluntarily provide such information:

Information about your race or ethnicity, religious beliefs, sexual orientation and political opinions, and
Information about your health, including any medical condition, or health and sickness records.

Where legally permissible, we may also collect, store, and use information about criminal convictions and offenses and review and collect publicly available information about you, for example from professional directories, the internet and social media.

If you are applying for a position as a partner, we may also collect, store, and use the following categories of personal information about you:

Compensation history (cash and non-cash) and financial information;
Disciplinary proceedings with any regulatory body;
Any claims information, such as professional negligence claims in which you have been involved or associated;
Details of your professional indemnity insurance;
Details of any pending or completed administrative proceeding, arbitration, or criminal or civil court action;
Complaints filed with any court or administrative body as to your personal conduct;
Any history of being a target, subject, or witness, or being interviewed in connection with, any administrative proceeding or investigation, arbitration, or criminal or civil court action or investigation;
Any sanctions imposed by any court or administrative proceeding or arbitration;
Any disciplinary, grievance, or similar procedures before a court, or other committee, agency, or administrative or regulatory body responsible for considering such matters;
Any civil action instituted against you;
Any outside interests, such as Directorships; and
Any filing of bankruptcy or insolvency proceedings by you or a business owned or controlled by you, or of which you were an officer, director, general partner, or manager.

HOW IS YOUR PERSONAL INFORMATION COLLECTED?

We collect personal information about you through the application and recruitment process, either directly from you or through an employment agency or background check provider. We may sometimes collect additional information from third parties including former employers, named referees, other background check agencies (such as the Disclosure and Barring Service in England and Wales or equivalent agencies in other jurisdictions) or through information that is available in the public domain.

HOW WE WILL USE PERSONAL INFORMATION

Most commonly, if and to the extent legally permissible, we will use your personal information in the following circumstances to:

Assess your skills, qualifications, and suitability for a role and make a decision about your appointment;
Carry out background and reference checks;
Check you are legally entitled to work;
Communicate with you about the recruitment process;
Ascertain your fitness to work and comply with applicable legal obligations (such as those under the Equality Act 2010 in the United Kingdom, or equivalent anti-discrimination and workplace legislation in the jurisdiction in which the relevant Practice or Department operates);
Comply with health and safety obligations; and
Allow for equal opportunities monitoring.

Upon receipt of your CV and/or application, we will process the information to decide whether you meet the basic requirements to be shortlisted for the role. If you do, we will decide whether your application is strong enough to invite you for an interview. If we decide to invite you to interview, we will use the information you provide us at the interview stages to decide whether to offer you a role. If we decide to offer you a role, we will then take up references, which may include a criminal record check if permitted in the jurisdiction in which the relevant Practice or Department operates, and, where permitted by law, a health assessment before confirming your appointment.

OUR LAWFUL BASES FOR PROCESSING YOUR PERSONAL INFORMATION

In the United Kingdom, European Union, DIFC, and Brazil most commonly, we will rely on one or more of the following lawful bases for processing your personal information:

Where it is necessary for the performance of a contract with you;
Where it is necessary for compliance with a legal obligation to which we are subject; and/or
Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. Our legitimate interests include making informed recruitment decisions and selecting suitable candidates for available roles, facilitating the interview process, and communicating offers of employment or partnership.

We may also use your personal information for the following reasons, which are likely to be rare:

Where we need to protect your interests (or someone else’s interests);
Where it is needed in the public interest or for official purposes; and
In Hong Kong, Singapore, and Japan, we will rely on your consent to process your personal information.

HOW WE USE SPECIAL CATEGORIES OF PERSONAL INFORMATION

Where permitted by law, we may process special categories of personal information (as defined above) in the following circumstances:

We will use information you choose to give about your disability status to consider whether we need to provide appropriate adjustments during the recruitment process (such as building access and allowing more time for tests).
We will use information you choose to give about your race or national or ethnic origin; religious, philosophical, or moral beliefs; or your sexual life or sexual orientation to ensure meaningful equal opportunity monitoring and reporting.

We do not request you to provide any special categories of information other than those set out above (where permitted by law) and would recommend that you do not include any additional such information in your application as it is unlikely to be relevant.

We will process special categories of personal information because we have a lawful basis for doing so (as set out above) and because it is necessary:

For the purposes of carrying out our obligations and exercising specific rights in the field of employment and social security law; and/or
For the assessment of the working capacity of a successful candidate.

Less commonly, we may process this type of information where it is needed in relation to legal claims or where it is needed to protect your interests (or someone else’s interests) and you are not capable of giving your consent, or where you have already made the information public, or in limited circumstances, you have given explicit consent.

HOW WE USE INFORMATION ABOUT CRIMINAL CONVICTIONS

As part of our background screening process, we may collect and process information about criminal convictions (if permitted in the jurisdiction in which the relevant Practice or Department operates) for successful candidates where this is relevant and appropriate to the role, and in line with applicable law. Therefore, we envisage that we will hold information about unspent criminal convictions. We will only request this information if we decide to offer you a role. We will use information about criminal convictions and offenses in the following ways:

In making decisions about your recruitment and suitability for a role, and
In determining your ability to perform a role and the department or environment in which you would work.

We process limited personal information relating to criminal convictions and offenses because we have a lawful basis for doing so (as set out above) and because it is necessary for the purposes of carrying out our obligations and exercising specific rights in the field of employment and social security law and in more limited circumstances because it is necessary in relation to legal claims; it is necessary for reasons of substantial public interest; or you have already manifestly made this information public.

IF YOU FAIL TO PROVIDE PERSONAL INFORMATION

If you fail to provide certain information when requested, which is necessary for us to consider your application (such as evidence of qualifications or work history), we may not be able to process your application successfully. For example, if we require a criminal record check (if permitted in the jurisdiction in which the relevant Practice or Department operates and relevant for the role for which you apply) or references for a role and you fail to provide us with relevant details, we will not be able to take your application further.

CHANGE OF PURPOSE

We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal information for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

Please note that we may process your personal information without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

AUTOMATED DECISION-MAKING

You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making.

DATA SHARING

We may have to share your data with Third Parties (as defined below), including third-party service providers and Mayer Brown Practices and Departments.

We may transfer your personal information outside the jurisdiction in which the relevant Mayer Brown Practice and Department is established, including outside the United Kingdom, the European Economic Area (“EEA”), Dubai International Finance Centre (“DIFC”), Brazil, Hong Kong, Singapore, and Japan, or other jurisdictions with data protection transfer restrictions. If we do, you can expect a similar degree of protection in respect of your personal information.

WHY MIGHT YOU SHARE MY PERSONAL INFORMATION WITH THIRD PARTIES?

We will share your personal information with Third Parties.

“Third Parties” includes third-party service providers (including contractors and designated agents) and other Mayer Brown Practices and Departments (together, “Mayer Brown”). The following activities may be carried out by Third Parties, where permitted by law:

Medical assessments regarding your fitness to work;
Provision and administration of recruitment assessments;
Building security for the purposes of access to our offices;
Background checks; and
Criminal record checks.

WHEN MIGHT YOU SHARE MY PERSONAL INFORMATION WITHIN MAYER BROWN?

We will share your personal information within Mayer Brown as part of our regular business and reporting activities, in the context of a business reorganization or group restructuring exercise, for system maintenance support, for hosting of data, and for other legitimate business reasons.

HOW SECURE IS MY INFORMATION WITH THIRD PARTIES?

All Third Parties are required to take appropriate security measures to protect your personal information in line with our policies. We do not allow our third-party service providers to use your personal information for their own purposes. We only permit them to process your personal information for specified purposes and in accordance with our instructions.

TRANSFERRING INFORMATION OUTSIDE YOUR JURISDICTION

The personal information that we collect about you may be transferred to, and stored in, one or more countries outside the jurisdiction in which the relevant Mayer Brown Practice or Department is established, including (where applicable) outside the United Kingdom, the EEA, DIFC, Brazil, Hong Kong, Singapore, and Japan to another Mayer Brown Practice or Department. Your personal information may be processed within Mayer Brown or by our third-party service providers. In such cases, we will take appropriate steps to ensure an adequate level of data protection in the country of the recipient as required under applicable data protection legislation, and as described in this notice, including through the use of standard contractual clauses, adequacy decisions, or other safeguards recognized by the competent authority. If we cannot ensure such an adequate level of data protection, your personal information will only be transferred outside the relevant jurisdiction if you have given your prior consent to the transfer; or the transfer is necessary for the conclusion or performance of a contract concluded in your interest between us and another natural or legal person; or the transfer is otherwise permitted under applicable law.

“Specific Sharing Scheme” of Japanese Personal Data under the Act on the Protection of Personal Information

The following items shall apply for personal information collected from data subjects in Japan in addition to the above section contained in “Transferring information outside your jurisdiction” of the Applicant Privacy Notice:

Entity with Which Personal Information is Shared
Mayer Brown Practices and Departments

Purpose of Sharing
Purposes listed under “Purposes For Which We Use Your Personal Information”

Personal Information to Be Shared
Please see under “What information do we hold about you during the recruitment process”

Party Responsible for Management of Personal Information
Mayer Brown Gaikokuho Jimu Bengoshi Jimusho Marunouchi Kitaguchi Building, 12th Floor 1-6-5 Marunouchi, Chiyoda-ku Tokyo, Japan 100-0005

DATA SECURITY

We have put in place appropriate security measures to protect the security of your information and prevent your personal information from being accidentally lost, used or accessed in an unauthorized way, altered, or disclosed. Details of those measures are available on request. In addition, we limit access to your personal information to those employees, agents, contractors, and Third Parties who have a business need to know. They will only process your personal information on our instructions and where they have agreed to treat the information confidentially and keep it secure.

We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.

DATA RETENTION

HOW LONG WILL YOU RETAIN MY INFORMATION?

If your application is successful we will retain your personal information in accordance with our privacy notice for employees and our data retention policy. We will only retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. Details of our data retention policy are available from the HR department.

If your application is not successful, we will only retain your personal information for as long as necessary to fulfill the purposes for which it was collected, and no longer than the retention period applicable to your jurisdiction after we have communicated to you our decision about whether to appoint you to the role. We retain your personal information for that period so that we can monitor re-applications and to show, in the event of a legal claim, that we have not discriminated against candidates on prohibited grounds and that we have conducted the recruitment exercise in a fair and transparent way. During this period we may also use your personal information to consider whether to invite you to apply for future vacancies or to alert you to future vacancies which we believe will be of interest to you. We process your information this way in the legitimate interests of recruiting appropriate personnel into our business. After this period, we will securely destroy your personal information in accordance with our data retention policy.

You may consent to us retaining your personal information on file for an additional specified period on the basis that a further opportunity may arise in future and we may wish to consider you for that. Should we wish to do this, you will be given the option to provide consent.

RIGHTS OF ACCESS, CORRECTION, ERASURE, AND RESTRICTION

YOUR RIGHTS IN CONNECTION WITH PERSONAL INFORMATION

If you are in the United Kingdom or EEA, or your personal information is processed by us in the United Kingdom or EEA, Hong Kong, UAE (DIFC), Singapore, Japan, or Brazil, the applicable data protection legislation gives you rights to access information held about you.

If the data is incorrect, you have the right to request such information be rectified or, where permitted, erased.

In certain circumstances, individuals in the United Kingdom, European Union, UAE (DIFC), and Brazil have specific rights, including the right:

To have personal information erased;
To object to, or request restrictions on, processing;
The right to obtain information regarding the processing of your personal data and access to the personal data;
Where consent was provided for certain processing activities, the right to withdraw your consent to the collection, processing, use, and/or disclosure of your personal data at any time;
The right to receive some personal data in a structured, commonly used and machine-readable format, and/or request that Mayer Brown transmit that data to a third party where this is technically feasible;
The right to request that Mayer Brown rectify your personal data if it is inaccurate or incomplete;
The right to object to any decision based solely on automated processing, including profiling, which produces legal consequences concerning you, or other seriously impactful consequences, and to require such decision to be reviewed manually;
Where applicable, the right to non-discrimination against you for exercising your legal rights in relation to your personal data; and
To have personal data transferred.

Other rights which are specific to Brazil include:

Upon your consent withdrawal, the right to erase your personal data which has been processed under such consent;
The right to anonymize, restrict, or eliminate unnecessary, excessive, or illegal personal data;
The right to receive information about whom we share personal data with;
The right to receive information about the possibility of denying consent and its consequences;
The right to have reviewed any decision based solely on automated processing, including profiling, which affects your interests, and to require information about the criteria and the processes used to reach the corresponding outcome;
The right to object to any unlawful processing activity; and
The right to petition to the Brazilian Data Protection Authority.

There are no artificial intelligence systems in operation that would prevent the fulfillment of your right to erase, rectify, or exercise any other applicable rights in relation to your personal information.

WHAT WE MAY NEED FROM YOU

We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.

RIGHT TO WITHDRAW CONSENT

In the limited circumstances where we ask you for consent to process your personal information, when you apply for a role with a Mayer Brown Practice or Department, you have the right to withdraw your consent for processing for that purpose at any time. To withdraw your consent, please contact the Director, Human Resources or the Privacy Team by emailing privacy@mayerbrown.com. Once we have received notification that you have withdrawn your consent, we will no longer process your application and, subject to meeting the needs of our legitimate business interests and retention policy, we will dispose of your personal information securely.

CONTACTS IN RELATION TO DATA PROTECTION ISSUES

If you have any questions about this privacy notice, any queries or complaints about how we handle your personal information or you would like to exercise your applicable data privacy rights, please contact the Mayer Brown privacy team at privacy@mayerbrown.com or the relevant DPO or data privacy contact for your jurisdiction found here, or refer to the Director, Human Resources for your region.

If you are dissatisfied with any aspect of our handling of your personal information, you have the right to make a complaint to the relevant supervisory authority in your jurisdiction. For further information and contact details please click here.

June 2026