“Over my time in practice I have seen information management grow from being a niche interest into something fundamental to the way in which 21st century businesses operate. This area of law needs to constantly adapt to the developments in technology, so there is no time to stand still.”

Alison’s key area is information management. She has over 25 years of experience in advising on data protection and freedom of information, as well as related information law issues. She has also been key in addressing our firm’s own internal GDPR compliance.

Alison has also been involved in teaching – between 2011 and 2021 and again currently – as an external tutor on a number of undergraduate and postgraduate courses within the Law School at the University of Edinburgh, with a primary focus on data protection law.

She is a Certified Information Privacy Professional (Europe), Certified Information Privacy Manager (IAPP), a member of IAPP as well as a member of the Privacy Law Sub-Committee of the Law Society of Scotland.

Areas of practice include:

Admitted

1994: Scotland

Relevant experience

Advising on the implications of the GDPR and UK GDPR (including for Shepherd and Wedderburn LLP), assessing readiness and drafting appropriate policies and related documentation.
Advising on data protection compliance audits including developing data protection audit tools and carrying out audits.
Reviewing and advising on compliance issues arising from Data Protection Impact Assessments.
Advising on issues of data retention including drafting and reviewing Shepherd and Wedderburn’s own policies.
Advising on issues related to international transfers of personal data.
Advising clients on issues arising under the Freedom of Information (Scotland) Act and the Freedom of Information Act, including advising on the application of relevant exemptions and assisting in preparation of responses.
Advising on the applicability of the Environmental Information Regulations and Environmental Information (Scotland) Regulations including advising clients on the applicability of EIR exceptions as well as advising on various issues arising from an appeal to the Information Tribunal under the EIRs.
Advising on responses to investigations by the Scottish Information Commissioner and Information Commissioner under both FOI and the EIRs.
Advising on the interaction of data protection and FOI and in particular issues arising from third party data and special category personal data.