Gary brooks

I have been working in data protection for 25 years, having qualified as a specialist data protection lawyer in 2001. Since 2007 I have worked as an independent data protection consultant.

I advise on all aspects of UK/EU data protection law but with particular expertise and interest in direct marketing compliance, e-privacy, behavioural profiling and customer loyalty schemes for consumer-facing organisations. I have considerable in-house experience as a data protection lawyer at Tesco and data protection consultant to BP.

As a consultant, I have advised companies in sectors such as retail, media/television, leisure, mobility and energy, often in a multinational context. 

I’m experienced in dealing with UK and EU data protection regulators, including in the context of Binding Corporate Rules.

I have written published content for Thomson Reuters including data protection guidance notes, template documents and articles for Practical Law, as well as articles for industry publications such as Privacy Laws & Business and Data Guidance.

I have a pragmatic, risk-based approach to advising clients which is based on longstanding data protection experience. My in-house data protection experience in particular has given me a commercial perspective of risk management and a business-oriented approach to my compliance advice which is appreciated by clients.

I love being outdoors and I’m a keen hiker and cyclist. I also enjoy golf, snowboarding and Manchester United. Some of those interests are bringing more joy than others at present!