Having previously served as an Army officer and worked as a health and safety practitioner in the health and social care sector, David qualified as a solicitor in 2005, specialising in regulatory law.
David is dual-qualified both as an information law solicitor and information security practitioner and as health and safety solicitor and practitioner. Since qualification, David has worked in and for the NHS in both primary and secondary care and for social care organisations. During this time he has provided DPO services and sat on the Caldicott Panel while in-house at an NHS Foundation Trust.
David now advises on all aspects of cyber security and information governance, as well as on healthcare and health & safety law and practice. He additionally represents care providers under police, CQC and ICO investigation following data breaches and cyber-attacks and at those being investigated by the police, CQC, HSE/local authority Environmental Health Departments for regulatory breaches. David also represents organisations and individuals in First-tier Tribunal (Information Rights) and Magistrates Court proceedings.
Commended by clients for his practical, down to earth approach and clear advice, David provides DPO services and information assurance due diligence, as well as advising on data management and FOIA compliance. He also drafts data protection documents and undertakes client compliance monitoring and audits.
David has a BSc. (Hons) in Occupational Health and Safety, an LLM in Information Rights Law and Practice and an MSc. in Information Security Management Practice. He is currently undertaking research for a PhD at Newcastle University in patient genomic and biomedical data being processed by Artificial Intelligence. David is also an Associate Lecturer in Cyber Security and Information Law at Northumbria University.
"I think you hit precisely the right note during your webinar on data protection and I, for one, found it easy to follow the complexities of this area of business. The fact that we only lost a couple of attendees due to need to attend to practice business speaks volumes as to the relevance."a Local Medical Committee