Jo leads our data protection practice and is a partner in our technology & commercial team. Jo advises clients on a variety of data protection matters, including preparing bespoke privacy notices and policies, conducting data protection audits and reporting at board level on findings, documenting international data flows, and managing data security breaches. Jo has extensive experience in supporting clients with responding to data subject access requests and has helped shape our firm offering in this area so that we can provide an end-to-end outsourced solution for clients.

Jo also provides strategic advice on the complex interactions between data protection and broader digital regulatory areas such as ePrivacy, online safety, digital markets, e-commerce and AI. She has a particular interest in AI governance and supporting client with implementing policies, procedures, training and contractual protections for responsible use of AI. Jo also advises clients on data licensing agreements, enabling the use of data for training, fine-tuning, and retrieval-augmented generation (RAG) in the development of AI models.

Clients appreciate Jo’s exceptional knowledge and approachable manner.

Jo is a member of the Law Society of Scotland’s privacy law subcommittee, a member of the International Association of Privacy Professionals (IAPP) and a member of the Society for Computers and Law.  She also holds the certified information privacy professional (CIPP/E) and artificial intelligence governance profession (AIGP) qualifications from the IAPP.

Related Insights

Error.

No results.

Data Protection Day Webinar

Webinar recording - Data, AI and cyber: A look at what’s ahead for 2026

02/02/2026

Recording of our recent webinar where our data & cyber experts, David Goodbrand, Jo Mclean, Rebecca Roberts and Chloe O'Hara, discuss the upcoming changes and what to do to make sure you’re prepared.

Read more
Horizon Scan The Risk Landscape In 2026

The risk landscape in 2026: A horizon scan of what lies ahead for business leaders

19/01/2026

This horizon scanning article sets out some of the key risks for 2026 already visible across many sectors.

Read more
Pension Scheme Trustees (002)

A good data be a trustee?: what does the Data (Use and Access) Act 2025 mean for pension schemes?

16/12/2025

The new Data (Use and Access) Act 2025 (DUAA) introduces some significant changes to UK data protection law since the GDPR. Its reforms have a direct impact on scheme governance and member experience.

Read more

Want to hear more from us?

Subscribe here Subscribe here