Open navigation
Search
Offices – United Kingdom
Explore all Offices
Global Reach

Apart from offering expert legal consultancy for local jurisdictions, CMS partners up with you to effectively navigate the complexities of global business and legal environments.

Explore our reach
Insights – United Kingdom
Explore all insights
Search
Expertise
Insights

CMS lawyers can provide future-facing advice for your business across a variety of specialisms and industries, worldwide.

Explore topics
Offices
Global Reach

Apart from offering expert legal consultancy for local jurisdictions, CMS partners up with you to effectively navigate the complexities of global business and legal environments.

Explore our reach
Insights
About CMS
UK Pay Gap Report 2024

Learn more

Select your region

Languages
  • English
  • French
Social media

Joanna is an experienced lawyer specialising in data protection, privacy and information law advisory and transactional work. She advises clients in the life sciences, pharmaceutical, technology, financial, pensions, energy and education sectors on a wide range of data protection and privacy considerations including in the context of emerging technologies such as AI. She has significant expertise advising on the data protection, privacy and information sharing elements of a range of public and private sector projects, including in respect of international transfers.

Prior to joining CMS, Joanna worked as a senior in-house lawyer for the UK Government including on data protection and privacy law in a regulatory and law enforcement context. Joanna also previously acted as a legal policy adviser for the Law Societies of England and Wales, Scotland and Northern Ireland in respect of EU law. Joanna is a fluent French speaker.

Relevant experience

  • A major pharmaceutical company on data protection compliance in respect of complex data processing arrangements on clinical trials.
  • A healthcare provider on the data protection considerations relevant to the design of an app to support healthcare provision, including in respect of the use of AI.
  • An insurer on the data protection aspects of its international transfer arrangements following recent changes to applicable data protection law.
  • An industrial technology provider on a personal data breach involving multiple jurisdictions.
  • An educational services provider in relation to an ICO investigation following a personal data breach.

Memberships & Roles

  • International Association of Privacy Professionals (IAPP).

Education

  • 2016 – LLM (merit) – University of London (UCL/Queen Mary).
  • 2006 – LPC – Nottingham Law School (Nottingham Trent University).
  • 2005 – BA (Hons) Law (2:1) – University of Cambridge.
  • 2004  – Diplôme universitaire d’études juridiques françaises (Université de Poitiers, France).
Back to top