David Sinclair

Background

About David Sinclair

I am a dual-qualified regulatory solicitor and regulatory compliance manager, specialising in all aspects of health and social care compliance, including information governance, healthcare regulation, health and safety/fire safety and CQC registration. I have over 25 years experience in NHS primary and secondary care and in adult and children's social care, as well as 18 years post qualification experience as a solicitor. I represent and advise NHS trusts, GP and dental practices, nursing homes and community care providers, as well other organisations as both a solicitor and as a consultant, on all contentious and non-contentious aspects of the above-mentioned regulatory law and practice. I am an Associate Lecturer in information law at Northumbria University and I provide director, partner and manager training courses on information law, health and safety and healthcare regulatory law and practice. I also provide specialist DPO and from February 2024, SRI training courses. Recent work includes advising and representing clients in ICO and police investigations following data breaches and insider theft of confidential data, in mergers and acquisitions and on overseas data transfers, advising on data protection in partner and employment disputes, communicating data protection requirements to boards ands senior managers. Also managing complex DSARs and FOI requests, data protection reviews and audits and on general GDPR, PECR and other regulatory compliance. Drafting and negotiating data protection policies, privacy notices, advising on DPIAs and data transfer agreements. I am heavily involved in advising health and social care providers on their sharing of patient/client data following recent ICO enforcement action and revelations about primary care patient data sharing. I am also assisting primary care providers to prepare for the Data Protection and Digital Information Act, expected to become law in 2024. I have advised clients and liaised with the ICO, NCA, NCSC and police on their behalf, as well as leading or being a member of Cyber Security Incident Response Teams following cyber-attacks. I also provide DPO services. I am a practising solicitor and I have a BSc.(Hons) in Occupational Health and Safety, an LL.M. in Information Rights Law and Practice (with Commendation) and an M.Sc. in Information Security Management (with distinction). I am also qualified as a Data Protection Officer (University of Derby).