Data Privacy, Cybersecurity and AI: Leadership, Board Level Advice and Governance Strategies

Tamarillo helps business leaders anticipate and address data privacy, cybersecurity and AI personal data risk and governance. We offer boardrooms and business leaders strategic guidance and thought leadership to analyse, evaluate and implement personal data risk management strategies.

Personal data issues may arise in the context of:

• developing or deploying new technologies (including AI-enabled systems) 
• acquiring or disposing of data-related assets
• following a cyber security incident
• investigations or defending regulatory enforcement

In these circumstances, business leaders need objective, informed guidance on evaluating risk, and strategies for mitigation. We also undertake policy analysis and engage in thought leadership linked to legislative reform.

Bridget Treacy, founder and principal of Tamarillo, has over 20 years’ experience as a law firm partner, establishing and leading the UK Privacy and Cybersecurity Practices at two law firms. She was recognised as a ‘leading individual’ by Chambers & Partners for 15 years and secured her practice a Band 1 ranking in Chambers. 

“The support from Bridget was phenomenal. She always went above and beyond…we have come out of the other side of this project a more robust and confident organisation” (client feedback 2024)

Alongside her full-time practice commitments, Bridget served as the London Office Managing Partner of her firm, sitting on the firm’s global Executive Committee.

Bridget is “one of the leading thinkers on data protection, providing practical solutions to thorny legal issues” (client quote provided to Chambers & Partners).

Bridget is particularly recognised for her expertise and thought leadership in advising FTSE100 and Fortune 100 companies on multi-jurisdictional data protection and cybersecurity projects including: 

• Creating and implementing data privacy governance strategies
• Undertaking and evaluating privacy risk assessments of new technologies (including the use of biometrics and AI) and devising practical strategies for implementation
• Policy analysis and thought leadership linked to legislative reform
• Advising on regulatory enforcement and defence strategies
• Advising on complex, multi-jurisdictional cybersecurity breach incidents, including post-event evaluation
• Breach preparedness, including coaching business leaders
• Structuring cross border data transfer strategies
• Advising on the privacy impact of direct marketing strategies
• Children’s Data