Responsible for Data Protection (DPA, GDPR), Cyber Security and Information Governance at Sompo Canopius.Certified Information Privacy Professional in European Data Protection Law (CIPP/E)Certified Information Privacy Technologist (CIPT).Certified Information Privacy Manager (CIPM)Responsible for the GDPR programme involving the creation of new policies, procedures and accountability frameworks; implementing and performing Data Protection Impact Assessments (DPIA), reviewing and amending Insurance Policy wordings; updating third party and data processor contracts; reviewing the legal basis for processing; implementing data transfer agreements; specifying improvements to organisational and technical measures; specifying changes to existing company websites; creation and implementation of incident and data breach response procedures; production and delivery of training and awareness packs.Responsible for Information governance which is the activities and technologies that organisations employ to maximize the value of their information while minimizing associated risks and costs.This role involves formulating the strategy and managing the implementation of all aspects of Information Governance within Canopius with a focus on business processes, controls and systems.For the purposes of this role, Information Governance concerns the following disciplines:• Records and Information Management.• Information Security and Protection.• Information Compliance.• E-Discovery.• Information Risk Management.• Privacy.• Data Storage and Archiving.

• Project and Line Management of 7 developers working on a variety of in-house developments.

Some roles undertaken during this period:Information Governance Programme Manager (E-Discovery, Records Management).Sanctions Screening Project Manager / Senior Developer (Implementation of Datanomic - now part of Oracle).Technical Manager (Electronic Trading of Endorsements in the Lloyd's Market).Development Team Leader.

• Deputised for the General Counsel on all Data Protection matters.• Worked as part of the Legal team to produce the Group Data Protection Policy.• Responsible for all Subject Access and Section 29/35 requests in addition to all e-Disclosure requests to support claims litigation cases.• Performed a Maturity Matrix assessment of the business’ Information Governance status and capability following the principles of the ARMA matrix.• Created a Risk Mitigation scorecard to prioritise work identified by the Maturity Assessment.• Created the E-Disclosure Policy and Procedures to comply with Lloyd’s of London Standards.• Carried out a Data Location Review of all business records to determine location, security and retention requirements.• Created the Records Retention Policy and associated Record Retention Schedules for all areas of the business.• Gave presentations and facilitated a workshop at Information Governance conferences.

Business Intelligence Consultant working on-site for blue chips such as Chevron, Anglo-American, Waitrose, Microsoft and Comet.