Patricia has worked for over 25 years in the Scottish health service. Initially working in systems analysis, she has spent 20 years in the field of data protection, her roles including data protection officer and national data protection advisor to data protection staff in other Scottish health boards. These years have spanned interesting times, including the coming into force of both the Data Protection Act 1998 and the rebooted 2018 version. Patricia’s current role is to not only hold the statutory role of DPO but to also champion data privacy within her organisation, striving to help ensure that its vision and strategy address data privacy requirements across its business units and work programmes. Patricia worked for four years at national policy level on confidentiality and data protection, as a policy advisor within the Scottish Government’s health directorates. She graduated from the University of Edinburgh with an LLM with Distinction in Medical Law and Ethics in November 2011.