Phil has devised and helped implement data protection compliance programmes including audits, advised on complex data subject access requests, advised businesses on the sale and use of databases and drafted data protection policies and procedures. He has assisted organisations on safe harbor accreditation and processing data outside the EEA. He frequently advises businesses in relation to data protection aspects of using third party processors, including in relation to outsourcing deals. He has advised businesses in relation to data security breaches including liaison with the ICO.