Philip Leonard

Background

About Philip Leonard

I’m a Privacy Lawyer with 6+ years of experience helping organizations make sense of complex data protection and compliance requirements. For me, privacy isn’t about box-ticking, it’s about building systems that actually work in practice, earn trust, and help businesses move faster without tripping over regulations. Over the years, I’ve managed cross-functional teams, streamlined privacy processes in customer support, and designed effective data subject response procedures. I bring both legal expertise and operational pragmatism, making sure that compliance doesn’t just live in a policy document but flows through daily business operations. I hold a CIPP/E certification and have hands-on experience with GDPR, ISO 27001, and global privacy frameworks. My work covers everything from drafting and negotiating privacy agreements, to creating retention policies, to rolling out CCTV compliance in international offices. 🟢 - Privacy & Data Protection (GDPR, ISO 27001, global frameworks)- Privacy Operations (DSARs, retention policies, cross-functional workflows)- Legal Design & Practical Implementation - Data Processing Agreements & RoPA Development - Compliance Project Management across regulated industries - Cross-Border Data Transfers & Risk Assessment - Public Speaking, Training & Advisory 🟢 - Designed and implemented DSAR procedures that improved response times and user experience- Developed the organization’s first Record of Processing Activities (RoPA)- Negotiated and drafted privacy-related agreements across multiple jurisdictions- Created the company’s first data retention policy and rollout schedule- Delivered CCTV compliance projects for multiple international offices- Provided pro bono privacy compliance support for organizations building first-time frameworks. 🟢 A balance of legal precision and operational know-how. I enjoy untangling complex requirements, coaching teams through change, and making compliance a driver of trust and credibility rather than an obstacle.