testimonials
AI and technology deployment
Putting AI into practice, lawfully
founder / SME
“I highly recommend Gayle if you need legal support with your start-up or non-profit. Gayle was went out of her way to give me good advice and share useful resources. She has a deep and broad knowledge about legal, risk & compliance issue such as data protection and contract law that were highly relevant to my business. Above all she is warm and friendly and the calls were enjoyable and I left out sessions with immediately actionable insights.”
Founder, start up supporting GenZ
in-house
“Gayle was always my “go-to” person for anything related to technology and data protection. Her depth of knowledge in this space is genuinely impressive, but what really sets her apart is her ability to distil complex concepts into clear, practical advice that clients and colleagues can actually use.
I wouldn’t hesitate to recommend her to any organisation needing expert, accessible advice on tech and data protection”
Legal DIrector, Soft FM corporate
in-house
“Gayle is able to untangle complex legal and technical issues and explain them in a way which makes sense for those unfamiliar with data protection and technology.”
Senior in-house counsel, major corporate
law firm / lawyer
“Days where you chat to Gayle are brighter than those you don’t.”
Corporate partner, global law firm
Law Firm / business
“Her technical knowledge is second to none. Engaging, relatable, and honest.”
Senior Innovation Manager, national law firm
Law firm / business
“Gayle’s approach is both engaging, and positively disarming.”
IT Manager, UK law firm
in-house
“Gayle is hugely knowledgeable with regards to her field and considers every angle.”
Head of Legal, UK public body
law firm / lawyer
“Very refreshing and inspirational.”
Senior Associate, in-house legal team, UK law firm
start up, scale up and SME support
Legal advice that supports, not stalls
SaaS · inclusion · NLP
Contracts Portfolio for a SaaS launch
Working with a business looking to bring greater inclusion to the world of surveys with trustworthy, qualitative data.
Clarifying data flows and tech stack structures, advising on business model and deployment and drafting a suite of flexible customer terms and conditions and privacy notices which can be used as standard or tailored for specific customers.
Commercial · SaaS · UK GDPR
contracting · CIC
Taking the fear out of getting started
Working with a CIC to help them get off the ground, allaying fears over legal risks which had been overplayed elsewhere and become overwhelming.
Ensuring rules of specific professional organisation were adhered to in contracting process.
Developing a suite of contractual documents for engaging with clients, engaging subcontractors and partnering for social media and other collaborations in a flexible and usable way with clear guidance for the future.
Commercial · CIC · Contract Management
ICO · subject access
Liaising with ICO following a complaint
Reviewing a complaint made by a data subject in relation to their data subject request, which was connected to ongoing legal dispute over fees.
Advising on the true risks and potential consequences; where processes could be improved in future, and making representations to the ICO.
Proposing strategic and practical approach to resolving the complaint, which was accepted by the ICO.
ICO · Data Subject Access · Complaints
consultant · IP · payment
Urgent, targeted work
Helping a startup who had been faced with a wall of silence from other legal outreach on short notice, over a weekend, as their first big contract needed to close.
Advising on the practical implications of the proposed payment structure and how that would impact cashflow.
Ensuring that IP was not inadvertently transferred in relation to this innovative and commercial consultancy work.
Constultancy · Payment terms · Intellectual Property
Data sharing and commercial transactions
Complex data flows, properly structured
Food Tech · Retail
Data sharing in a food delivery ecosystem
A food delivery platform needed to formalise data sharing arrangements with retail partners, with customer personal data flowing between multiple organisations. Advised on controller allocation, joint controllership, and the contractual framework required on both sides.
Data sharing · Controller allocation · B2B contracts
Transport · Mobility
Data sharing for connected vehicle services
Advised a transport sector client on data sharing arrangements between connected service providers operating in the same ecosystem. Allocated data protection responsibilities across a multi-party supply chain and negotiated data sharing agreements that reflected the technical architecture of the connected systems involved.
Multi-party data flows · Connected systems · Data sharing
Pharma · Life Sciences
Clinical data outsourcing for a global pharma company
Led a series of outsourcing transactions exceeding £250 million in value, covering data protection provisions for international transfers, subcontracting arrangements, and audit obligations on clinical data. The sensitivity of the data and the regulatory environment imposed requirements well beyond standard commercial outsourcing terms.
Outsourcing · Clinical data · International transfers
Diligence, governance and regulatory change
Building foundations that hold
Travel Tech · Startup
Data estate diligence at funding stage
Provided structured data protection diligence for a travel data startup approaching a funding round, covering data acquisition histories, processing and sharing practices, and material compliance risks. Gave buy-side investors a clear view of the data estate before commitment.
Investment diligence · Data estate · Startup
Cross-sector · Regulatory
International data transfers through regulatory upheaval
Managed a leading technology business’s transition from Safe Harbor to Standard Contractual Clauses following its 2015 invalidation, and advised multiple US companies on their UK and EU transfer obligations in the post-Safe Harbor environment. Also advised a compliance provider on model contracts for US data flows.
Safe Harbor · SCCs · US data flows
Legal · Professional Services
Data governance transformation at an international firm
Led the data governance function at a large international professional services firm across DPIAs, DSARs, security incidents, and ICO liaison. Implemented OneTrust across DPIA and vendor assessment workflows, upskilled the team, and drafted the firm’s first internal guidance on generative AI use.
Data governance · OneTrust · GenAI policy
These are anonymised summaries of real work Gayle has delivered. Client details are confidential.
Want to discuss a matter?
No jargon, no pressure. Tell me what you are working on.