Jo leads our data protection practice and is a partner in our technology & commercial team. Jo advises clients on a variety of data protection matters, including preparing bespoke privacy notices and policies, conducting data protection audits and reporting at board level on findings, documenting international data flows, and managing data security breaches. Jo has extensive experience in supporting clients with responding to data subject access requests and has helped shape our firm offering in this area so that we can provide an end-to-end outsourced solution for clients.
Jo also provides strategic advice on the complex interactions between data protection and broader digital regulatory areas such as ePrivacy, online safety, digital markets, e-commerce and AI. She has a particular interest in AI governance and supporting client with implementing policies, procedures, training and contractual protections for responsible use of AI. Jo also advises clients on data licensing agreements, enabling the use of data for training, fine-tuning, and retrieval-augmented generation (RAG) in the development of AI models.
Clients appreciate Jo’s exceptional knowledge and approachable manner.
Jo is a member of the Law Society of Scotland’s privacy law subcommittee, a member of the International Association of Privacy Professionals (IAPP) and a member of the Society for Computers and Law. She also holds the certified information privacy professional (CIPP/E) and artificial intelligence governance profession (AIGP) qualifications from the IAPP.
Related Insights
Error.
No results.
Data & cyber conference: Risk Meets Reality
20/10/2026 - Everyman Cinema, St James Quarter, Edinburgh, EH1 3AD
Join us for our next data & cyber conference where we’ll set out the current legal and regulatory landscape and then provide you with some practical solutions and advice to be prepared.
AI in the workplace and Employment Tribunal litigation
09/10/2026
This article explores the ways in which generative AI is changing the volume, style and sophistication of workplace complaints and Employment Tribunal documents.
Cyber resilience for critical national infrastructure: legal and technical perspectives from Burness Paull and Quorum Cyber
28/09/2026
This article explores how geopolitical tension, legacy operational technology, AI-accelerated threats and evolving regulation are reshaping cyber resilience for operators of essential services.
{name}
{properties.pageSummary}
{properties.eventName}
{properties.pageDate|date:dd/MM/yyyy}{properties.shortDescription}
{properties.headline}
{properties.pageDate|date:dd/MM/yyyy}
{properties.shortDescription}