Rebecca advises clients on a broad range of data protection issues, with particular expertise in complex DPIAs, international data transfers, and GDPR compliance programmes. Rebecca has previously undertaken data protection secondments in the insurance and health sectors.

Rebecca started her data protection career prior to qualification in regulatory action at the ICO, where she worked closely with the investigation and enforcement teams. While in-house, Rebecca’s experience included leading a GDPR compliance programme, remediation work following an ICO audit, DPIAs, and complex data subject requests.

Rebecca regularly provides data protection training to clients in various sectors, and often appears as an external speaker. Most recently, she delivered focused training on the Data (Use and Access) Act 2025. She also has previous in-house experience advising on the Freedom of Information Act.

Rebecca joined DAC Beachcroft in September 2019.

Featured experience:

• Providing strategic advice to a large insurer client on a significant international data transfers project. As part of this project, she provided strategic legal advice, as well as being an integral member of the client’s project team tasked with developing bespoke software to handle the client’s approach to international data transfers.
• Undertaking fully outsourced data protection compliance reviews, often with an international angle
• Advising on complex DPIAs for high-risk processing activities, and working with clients to review or draft workable Data Protection Impact Assessment (DPIAs) policies