Imogen Boffin

Background

About Imogen Boffin

I am a dual-qualified data, privacy, and AI lawyer specializing in providing practical and strategic advice on a wide range of cross-jurisdictional matters. My expertise includes GDPR, AI Act, Digital Services Act, ePrivacy, and other regulatory frameworks governing data protection, online safety, and emerging technologies. I also advise on international data transfers and complex commercial technology agreements, including SaaS, cloud, and outsourcing arrangements. Having lived and worked in both the United Kingdom and California, I bring an international lens to global compliance, AI governance, and cross-border product strategy. I combine private practice depth with in-house perspective, including secondments at Fieldfisher’s Silicon Valley office and as Product Privacy Counsel at TikTok. In my in-house role, I partnered closely with product, engineering, and data science teams to embed privacy-by-design into new features, support generative AI development throughout the AI lifecycle, and advise on age assurance and online safety initiatives.I work with companies ranging from startups to Fortune 500 multinationals across a variety of industries, supporting the development of privacy-forward product strategies and scalable compliance programs. I focus on helping organizations operationalize compliance, manage regulatory risk, and align privacy strategy with broader business objectives.I am qualified to practice law in England & Wales, admitted to the state bar of California and am a Certified Information Privacy Professional (CIPP/E) through the International Association of Privacy Professionals (IAPP).