Work

What the work looks like

Most of my work happens behind the scenes: mapping data, assessing new tools, answering requests, and helping teams do things properly without slowing them down. Here's a picture of what that looks like, with the confidential details taken out.

Practice areas

AI governance75+ AI-related privacy and governance assessments, including DPIAs, LIAs and AI system classifications. Reviewing new tools before they're used.
Privacy operationsRecords of processing and data mapping, data subject requests across jurisdictions, incidents, accountability audits.
Third-party riskVendor privacy and data protection assessments, and the contract safeguards that go with them.
Cross-border dataAligning global requirements with regional rules, and international transfer arrangements.

Selected stories Coming soon

Short, anonymised stories: the challenge, what I did, and what I learned.

Research

Academic research from my LLM at the University of Sussex (unpublished).

From GDPR to the AI Act: Evaluating Approaches to Balancing Data Protection and Innovation
Algorithmic Decision-Making & AI Bias: Legal Perspectives on Fairness and Ethical AI
Cybersecurity and International Law: Addressing Global Cybercrime and Regulatory Challenges