Highly experienced data protection and information rights specialist (GDPR, privacy, FOI, EIR). Regularly acts for commercial clients, the ICO, individuals and public authorities on GDPR enforcement/fines, regulatory and civil litigation, compliance and advisory matters. Recent/current cases involve e.g. Meta, TikTok, Equifax, Experian, online gaming platforms and the UK Government’s asylum partnership with Rwanda. Experienced in large-scale data protection compensation claims, data breach management, subject access disputes, right to be forgotten cases and regulatory challenges to business practices. Appeared in leading data protection cases – including intervening in Lloyd v Google and acting in key subject access cases (eg Ittihadieh, DB v GMC, Harrison v Cameron) – as well as in hundreds of FOI cases, including leading Court of Appeal and Supreme Court cases. Edits the Panopticon blog.

Called 2008; Lincoln’s Inn. Member of Attorney General’s A Panel. Commissary General (Chancellor), Diocese of Canterbury.

Ecclesiastical Law Society.

South African College School; University of Cape Town (2000 BA Business Science); Rhodes Scholar; Oxford University (2003 BA in PPE; 2004 MA philosophical theology); City University (2007 GDL), Inns of Court School of Law (2008 BVC).