Sophie is a Senior Associate in DAC Beachcroft's information law team. She advises on matters relating to the General Data Protection Regulation (GDPR) and Data Protection Act 2018, with a particular interest in the health sector.

Sophie helps private and public sector organisations navigate their information law obligations and overcome the challenges they face. Her experience includes:

• Working with clients to ensure their staffing records systems are GDPR compliant, advising on software contracts and assisting with contract negotiations;
• Advising a software provider on GDPR compliance, reviewing and amending data sharing models and contracts, and updating privacy policies;
• Carrying out data protection audits, identifying high risk issues and advising on action to be taken;
• Advising on complex data sharing arrangements, drafting data sharing and data processing agreements, and advising on marketing issues and contractual clauses; and
• Liaising with the ICO in respect of subject access requests, data breaches and acting in data breach and Information Rights Tribunal cases.