With more than 25 years’ experience in data protection, privacy and information rights, Paul has spent his career helping organisations navigate the opportunities and responsibilities that come with using personal data and public information. He brings experience from both regulatory and leadership roles, with a practical understanding of how people, technology, organisations and regulation intersect in the real world. 

In 2024, Paul was awarded an MBE for services to regulation and to equality, diversity and inclusion.

Paul’s perspective has been shaped not only by his professional career, but also by growing up in a small family business and by his lived experience as a severely visually impaired person. These experiences have given him a strong belief that trust must be earned, and that the way organisations use data can either create opportunities for people or reinforce existing barriers. 

He is a passionate advocate for regulation that enables innovation while safeguarding the public. He believes good regulation should be clear about the outcomes it seeks to achieve, proportionate in its approach, and responsive to the pace of change. 

Paul is equally clear that regulation alone is rarely enough to drive lasting change. Under his leadership, the ICO seeks not only to regulate effectively, but also to bring people together, build trust and support higher standards across society. 

As a leader, Paul is passionate about developing talent and creating environments where people can do their best work. He believes that diverse perspectives lead to better decisions, that curiosity and open dialogue are essential for learning, and that people thrive when they are trusted, supported and able to grow.