I advise businesses (ranging from local, owner managed businesses to international PLCs) on data protection and privacy, including the implications of GDPR, the Data Protection Act 2018 and PECR. I help businesses conduct internal audits to locate and understand what personal data is being processed and whether that processing is GDPR compliant, and I advise them on steps they need to take to improve their processes and documentation. I draft GDPR compliant privacy policies, website documents, internal policies and processes, legitimate interest assessments, data protection impact assessments and GDPR records of processing, ensuring that the documents accurately reflect the processing that the business carries out and can be easily interpreted and understood by the business and by the relevant data subjects. I also provide regular advice to businesses on data protection issues as and when they arise, including data subject requests and breaches, and I provide bespoke GDPR training sessions.

I work closely with businesses to understand their commercial needs and concerns, providing advice and assistance to help with their day-to-day running.My experience includes drafting, reviewing and negotiating a wide range of commercial agreements (including sale and purchase, agency, distribution, franchise, website development and hosting agreements) and terms and conditions. I also advise businesses on commercial issues such as data protection (including the General Data Protection Regulation), competitions and prize draws, anti-bribery and consumer regulations.

My training contract consisted of four seats in the IP, Commercial and IT and Corporate departments.