Our people

Nick joined Reed Smith in June 2010 as a Senior Associate in the Data Security, Privacy & Management Practice of the Global Regulatory Enforcement Group. Nick previously worked for AstraZeneca as Global Privacy Counsel and, before that, at the Information Commissioner's Office (the UK's data privacy and freedom of information regulator) where he was Chief Legal Adviser.

He is a recognised expert in national and international data protection, privacy and information law and practice with a deep and broad knowledge and experience of the wider regulatory landscape and compliance issues, and practical knowledge and experience of assessing the local requirements for data privacy compliance around the world.

Nick advises on all aspects of designing, planning and implementing data privacy compliance projects, including strategic development of accountability-based governance frameworks, training and education programmes, and robust risk management processes and controls. All these measures are designed to reduce exposure to privacy risks and legal liabilities, including regulatory action, fines and consequent loss of reputation and brand value, taking account of the constantly evolving legal and technological landscape.

Nick's expertise specifically encompasses the following key areas of data privacy and wider information management risk for corporate clients arising from globalisation and externalisation strategies:

• the development of privacy and data retention policies and associated procedures;
• solutions to restrictions on cross-border transfers of personal data, including adequacy assessments, model contract clauses, Safe Harbor certification and Binding Corporate Rules;
• advising on all aspects of controller/processor arrangements, with affiliates and with third-party suppliers, including contractual and due diligence safeguards,such as supplier privacy assessments;
• advice on developing IS/IT and organisational security measures and ‘privacy by design' initiatives, and
• advising on legal requirements to register/notify national regulators, individual rights (including subject access and rectification rights) and regulatory enforcement action for breach of data privacy laws.

Nick is a committee member of the Society for Computers and Law (SCL), Privacy & Data Protection Interest Group.

Publications

• “Comment: Is that what we mean? A call for privacy jargon consistency”, Data Protection Law & Policy, Volume 7, Issue 5 - May 2010
• “Comment: Public v private compliance: vertical and horizontal effects”, Data Protection Law & Policy, Volume 7, Issue 6 - June 2010

Speeches / Presentations

• Conference Board Webcast - “Understanding the US Safe Harbor for Legally Transferring Personal Data”, 2009
• SCL Privacy & Data Protection Group Meeting - “The CDs are in the post - Data Disasters and How To Avoid Them: The Seventh Data Protection Principle in Practice.”, 2008
• Privacy Laws & Business Annual Conference, Cambridge - “Integrating data privacy compliance into AstraZeneca’s corporate culture and behaviour”, 2008
• SCL/BCS/MMU Joint Meeting – “Data Protection and Information Security: Trends for Employers”, 2008

Experience

Legal Education

Undergraduate Education

Professional Admissions / Qualifications

• England and Wales