Rebecca is a director in our Public Law and Regulatory team. Rebecca’s broad practice includes judicial review, statutory investigations, inquiries, data protection and freedom of information, cyber security, governance and vires, statutory interpretation, and professional discipline.
Rebecca has a particular interest in data privacy and cyber security. She provides focused and clear advice on complex data issues, including requests from data subjects and third parties, FOI/EIR requests, requests for review, and complaints and investigations involving the UK ICO or Scottish Information Commissioner. As a key member of the firm’s cyber team, Rebecca has supported clients who have suffered some of the most serious data breaches.
Rebecca has conducted investigations into allegations of serious misconduct, on behalf of a number of professional membership organisations. She also has also assisted these bodies reform their governance arrangements and codes of conduct.
Rebecca has also been involved with some of the most high-profile public inquiries in recent years. She supports clients in providing evidence, and advises on statutory requests or demands for information.
Rebecca is recognised as an accredited specialist in freedom of information & data protection law by the Law Society of Scotland. She is also a member of the Law Society of Scotland Privacy Law Sub-Committee, as well as a Council Member of the Law Society of Scotland, representing the interests of solicitors in her constituency of Edinburgh.
Related Insights
Error.
No results.
Cyber resilience for critical national infrastructure: legal and technical perspectives from Burness Paull and Quorum Cyber
28/09/2026
This article explores how geopolitical tension, legacy operational technology, AI-accelerated threats and evolving regulation are reshaping cyber resilience for operators of essential services.
Legal privilege should be part of every cyber incident response plan
18/09/2026
This blog discusses how legal privilege helps organisations obtain legal advice, manage cyber incidents and respond to potential regulatory scrutiny or claims.
UPDATE: Scotland’s class action ‘opt out’ proposal
01/09/2026
This insight discusses the Scottish Civil Justice Council (SCJC) responses, which reveal a clear divergence of opinion.
{name}
{properties.pageSummary}
{properties.eventName}
{properties.pageDate|date:dd/MM/yyyy}{properties.shortDescription}
{properties.headline}
{properties.pageDate|date:dd/MM/yyyy}
{properties.shortDescription}