Paula Williamson is a leading specialist solicitor and trainer in data protection and freedom of information law. She works with clients from business, public authorities, and voluntary sectors. She is particularly known for her work with educational establishments.

Paula is the Director of Content at Tenjin, Partner and Privacy and Data Protection Lawyer at Excello Law. She is also a trainer for Amberhawk.

With 26 years’ experience, Paula grasps complex issues rapidly and helps her clients navigate the fast-evolving information law landscape to deliver effective and memorable training and pragmatic information law advice.

Previously a regulatory prosecutor, Paula is frequently instructed by organisations facing ICO intervention for data breaches. She is well-known for advising business, charities and educational establishments on data protection and the interface between ed-tech and child privacy. She has a reputation for excellence with some of the leading independent schools, largest MATs in the UK, FE colleges and HE institutions. However, she is equally at home working with educational establishments of all sizes and formats and across all sectors.

Paula’s practice is diverse and includes data breach response (including complex cyber-attacks, DoS and ransomware attacks); ICO regulatory action; strategic management of complex SARs, hybrid SAR/FOI requests and requests under the Environmental Information Regulations; data sharing; audits; direct marketing and compliance with PECR; drafting policies and privacy notices; Freedom of Information; drafting data protection clauses in commercial Agreements, Data Processing Agreements etc.; drafting Data Transfer Impact Assessments.

She also advises on privacy within the metaverse; online tracking, AI, biometrics, ANPR, cookie notices; and targeting and profiling of individuals.

Paula sits on the examination Board of the British Computer Society for their BCS Practitioner Certificate in Data Protection, the BCS Foundation Certificate, and the BCS Practitioner Certificate in Freedom of Information. She is also an examiner for the “Certified Data Protection Practitioner in Education” (CDPPE), a specialist data protection course for those working in the education sector.

A contributor to Sweet and Maxwell’s “Freedom of Information Law in the UK” by Sue Cullen. Paula authored the chapter on Vexatious and Repeated FOI Requests.