Skip to content

Irfan Baluch

Partner

020 3319 3700

irfan.baluch@keystonelaw.co.uk

“Irfan explains things simply and from a commercial perspective”

- Business client

Irfan is a commercial and technology partner with over 20 years’ experience advising on complex IT, IP, and data-driven matters. He specialises in software development, SaaS and cloud services, data protection, cybersecurity, blockchain and digital assets, artificial intelligence, and the commercialisation of emerging technologies. 

Before qualifying as a solicitor, Irfan worked as an engineer and software developer (including stints at the Defence Research Agency – now QinetiQ and Thorn EMI Electronics). 

He works with a wide range of clients including technology vendors, fintech platforms, cryptocurrency companies, financial institutions, energy and cleantech businesses, and media and sports-technology providers. His work includes software licensing, managed services, technology procurement, data governance, IP strategy, outsourcing, regulatory perimeter analysis, and AI-related compliance. 

Irfan has significant experience advising fast-growth and disruptive businesses, including cryptocurrency exchanges, AI-enabled lending platforms, autonomous-vehicle technology providers, and energy-as-a-service innovators. He also regularly advises on commercial disputes involving technology failures, operational resilience, cybersecurity incidents, and data breaches. 

Expertise

Irfan advises on AI governance, compliance, IP/data risks, AI procurement, and integration of AI tools into commercial environments. 

Experience

  • Advised an autonomous-vehicle AI provider on commercialisation strategy with a Singapore robotics company. 
  • Acted for a global media-tech company on IP and data risks arising from use of GitHub Copilot. 
  • Advised on AI governance and risk-control issues for clients deploying AI-enabled SaaS products. 

Irfan advises on tokenisation, NFTs, custodial services, AML/KYC, regulatory perimeter issues, and blockchain-based commercial platforms. 

Experience

  • Acted for a major UK cryptocurrency since its ICO on licensing, exchange development, and FCA registration. 
  • Developed AML/KYC/CTF frameworks incorporating FATF and JMLSG requirements. 
  • Advised on blockchain-based lending platforms and NFT-enabled auction models. 

Irfan advises on UK GDPR, global compliance projects, data audits, cross-border transfers, data strategy, and regulator engagement. 

Experience

  • Led a GDPR strategy and audit for a global investment manager. 
  • Advised on complex multinational data-protection issues for a global project-delivery consultancy. 
  • Supported clients through significant personal-data breaches including engagement with data-protection authorities. 

Irfan advises on breach response, cybersecurity strategy, operational resilience, and information-security compliance

Experience

  • Advised a global electronic trading broker on a catastrophic data breach including FCA notifications. 
  • Negotiated with ransomware attackers and supported clients through incident remediation. 
  • Developed cybersecurity and data-governance policies for SaaS, fintech, and infrastructure businesses. 

Irfan advises on robotics, automation, AI deployment, IoT, and new-technology commercialisation. 

Experience

  • Developed commercial frameworks for autonomous AI-vehicle technology. 
  • Advised on robotics-as-a-service with international partners. 
  • Created AI risk-management models for SaaS platforms. 
  • Advised on IP and regulatory risks in AI-assisted development. 
  • Supported clients implementing AI into enterprise technology stacks. 

Irfan advises on development, licensing, hosting, cloud deployment, managed services, and platform agreements. 

Experience

  • Acted for leading SaaS providers on licensing, subscriptions, and global deployments. 
  • Drafted enterprise SaaS agreements and master services contracts. 
  • Advised on cloud migration and hosting arrangements. 
  • Negotiated managed-services and support contracts for mission-critical systems. 
  • Advised on API licensing, data architecture, and integration frameworks. 

Irfan advises technology businesses on software development, cloud services, IT procurement, IP strategy, and commercialisation. 

Experience

  • Lead adviser to a major insurance-software vendor on licensing, SaaS, APIs, and managed services. 
  • Negotiated multiple outsourced IT infrastructure and platform agreements. 
  • Drafted complex software-development and systems-integration contracts. 
  • Advised on web, platform, hosting, and e-commerce terms for technology providers. 
  • Advised on escrow, disaster recovery, service continuity and operational-resilience frameworks. 

Irfan advises on fintech platforms, trading technology, banking-infrastructure procurement, operational resilience, and regulatory technology. 

Experience

  • Advised a banking services provider on outsourcing core systems infrastructure. 
  • Supported a trading broker through a major data breach and associated FCA/SAR obligations. 
  • Advised fintech platforms on SaaS licensing, data governance, and risk management. 
  • Supported the development of AI-enabled lending and credit-risk models. 
  • Advised insurers on the deployment of real-time risk-reporting platforms. 

Irfan advises custodians and tokenised-asset businesses on regulation, compliance, and platform architecture. 

Experience

  • Advised a leading UK crypto business post-ICO on infrastructure development and licensing. 
  • Managed FCA registration and AML/CTF frameworks for crypto-asset providers. 
  • Developed tokenisation and NFT frameworks for auction and media clients. 
  • Structured blockchain-enabled smart-contract environments. 
  • Advised on cross-border crypto operations and offshoring arrangements. 

 

Irfan advises cleantech and renewable-energy clients on technology commercialisation and project development. 

Experience

  • Advised on commercialisation of patented vertical wind-turbine technology with a major telecoms operator. 
  • Developed energy-as-a-service commercial models for cleantech innovators. 
  • Advised on supply-chain and manufacturing agreements for energy equipment. 
  • Supported renewable-technology pilot deployments. 
  • Advised on technology and data considerations in energy-platform development. 

Irfan advises sports-technology, media, and creative businesses on IP, data, digital platforms, and emerging technologies. 

Experience

  • Advised a global sports-media company on AI and IP risks. 
  • Acted for an auction house developing NFT-enabled hybrid auction models. 
  • Advised on commercialising motion-capture graphics technology. 
  • Drafted licensing and platform agreements for media organisations. 
  • Advised creative-industry clients on global IP exploitation and digital strategy. 

Please note: The experience list above may include examples of work completed prior to joining Keystone Law.

Recognition

Recognised by The Legal 500 as a Leading Partner for Intellectual Property 2025 

Recognised by Chambers UK for Information Technology 2015–2025 

 Recognised by Chambers UK for Intellectual Property 2019–2025 

LexisNexis Award for Business Development for innovative GDPR compliance methodology 

Contributor to the ICO consultation series on generative AI and data protection 

Contributor to the UKIPO consultation series on generative AI and copyright protection 

 

“Irfan is highly knowledgeable in the tech sector and his support is invaluable”

Chambers UK

Irfan Baluch qualified as a solicitor in 1999. Prior to joining Keystone Law in 2025, he worked at the following firms: 

  • Cripps  
  • Vertex Law  
  • Brachers