Vicki Bowles
Partner (Barrister)
About Vicki
Vicki is a Partner (Barrister) in the Data Protection & Information Law team. Based in Bristol, Vicki works with clients on matters related to data protection, freedom of information (FOI), privacy confidentiality and related matters.
Vicki assists clients in finding pragmatic and commercial solutions to issues related to information law. She understands the legal framework in detail, and helps apply this to whatever situation the client finds themselves in - be that a tricky subject access request, or ensuring that a contract has the correct provisions and protects all the parties.
Working across clients means that Vicki can share best practice across sectors, although she has particular expertise in the public sector, start ups, higher education and research.
Vicki has a masters in information law and practice, and has been practicing for over 20 years. Vicki is also a trainer with PDP in both data protection and freedom of information, where she also sits on the editorial board of the FOI Journal.
Vicki was called to the Bar of England and Wales in October 2002. She is also a member of the Honourable Society of the Middle Temple.
LLB (Hons) Nottingham University 2001.
Bar Vocational Course, Nottingham Trent 2002.
LLM Information Law and Practice, Northumbria University 2009.
Assisting a Higher Education client with the legal agreements and negotiations related to a research database that includes linkage of patient information within a TRE.
Assisting a Public Sector client with a response to a complex freedom of information request about an external investigation which included confidential personal data. Vicki worked with the client’s information and media teams to prepare a version of the report that met the public interest in the detail, whilst also respecting individual privacy.
Working with a client on a complex series of subject access requests made as part of ongoing litigation where issues were overlapping. Vicki worked with the client and the litigation team to ensure that all legal obligations were met at the appropriate time, and the client had an effective strategy in place for future requests.
Vicki is a trainer for PDP - you can view her profile here.
Vicki supports clients across England and Wales.
What does Vicki specialise in?
Vicki specialises in assisting clients with all areas of Information law, including:
Access to information requests - assisting clients with requests under statutory regimes such as freedom of Information, Environmental Information Regulations and the Access to Medical Records Act, by providing advice on how to respond, and any exemptions to access that might apply.
Complex access rights requests - usually in the context of a wider complaint or litigation where strategic responses are required to ensure fairness and compliance.
Use of personal data for research - ensuring that both data protection and confidentiality are respected in research for both the public and private sectors.
General compliance - reviewing or writing key policies and procedures such as DPIAs, retention schedules, privacy notices and everything in between.
Contractual terms - ensuring that data sharing is accurately represented in contractual relationships, and effectively deals with the risks of the specific sharing being undertaken.
As hoc queries on how data protection legislation applies to a novel or unusual situation, such as a request for information from a third party, or which lawful basis to use for a new use of information.
Use of personal data for marketing purposes - what information can be used, and how to ensure that the marketing is compliant to minimise the effect of complaints.
Dealing with complaints about use of data or access to information requests - assisting clients to navigate complex complaints and reach a commercial solution, whether the complaint is from an individual or the regulator. This includes assisting the litigation team where breaches of information are pleaded, and assisting clients with appeals to the information law tribunal.
Data protection elements of cybersecurity - when to notify the regulator, when to notify individuals, and navigating compliance both when preparing for a cyber event, and when dealing with one.
What sectors does Vicki work in?
Vicki works across a variety of sectors, including:
