-
I am a Legal Director in the Litigation, Advisory and Regulatory team with a background in general commercial law and specific expertise in privacy law and risk management.
With experience in both private and public sectors, I adopt a calm and practical approach in the provision of advice. Working in-house at Board level of a global organisation for several years resulted in my ability to put myself ‘in the shoes’ of clients, advising in line with strategic objectives and commercial goals. I work with clients in many sectors including technology, housing and social care, education and for clients in the development of new products and services, including those accessed by children.
I support clients in all data protection and privacy law matters, including confidentiality, advising in relation to data breach management, individual requests (particularly in relation to complex data subject access requests), data protection compliance projects, international data transfers and associated risk management requirements and any contractual arrangements relating to an organisation’s processing of personal data.
I also advise clients in all their third party data privacy related interactions, such as those arising out of complaints by third parties or investigations by the Information Commissioner’s Office. My experience includes:
- Full data privacy audit and implementation of compliance programme for entire group company, across multiple jurisdictions, which included: policies, procedures and data privacy notices, DPIAs, data breach management and accountability measures; data sharing agreements (both internal and external), processing/sub-processing agreements and contractual provisions and related risk assessments to allow for lawful transfers of personal data to countries within the EEA and to third countries; support for all internal processes for all business functions (such as HR, marketing and finance);
- Supporting a variety of clients in relation to personal data breaches and in pursuant to individual complaints and, in every case, successfully liaising with the Information Commissioner’s Office on each client’s behalf;
- Running events, workshops and webinars on various data privacy related topics and working closely with DPOs in their day to day management of personal data within their respective organisations.
