ALESSANDRA LEACH

• Strategic career pause to focus on full-time study for the Solicitors Qualifying Examination (SQE) to qualify as a Solicitor in England and Wales.
• Successfully completed all rigorous assessment stages; currently awaiting formal admission to the Roll of Solicitors.

Bally’s Interactive is the digital arm of Bally’s Corporation, a publicly traded US company and one of the world’s leading entertainment providers, operating in a heavily regulated industry and serving tens of millions of players worldwide through brands such as Jackpotjoy, Vera&John and Virgin Games.

Key Achievements within the Privacy Team

• Drafted, reviewed and negotiated data processing and data sharing agreements with vendors across various sectors, including IT, payment services, KYC, AdTech, HR, recruitment and training.
• Updated international data transfer clauses in over 100 contracts with vendors in third countries and contributed to transfer impact assessments (TIAs).
• Conducted third-party due diligence and privacy risk assessments.
• Contributed to the preparation of records of processing activities (RoPAs) and privacy impact assessments, including PIAs and DPIAs.
• Collaborated with IT teams to support compliance with electronic communications regulations and cookie-related requirements.
• Conducted regular privacy risk assessments of security incidents to evaluate the need for regulatory reporting.
• Maintained the organisation’s privacy policies, procedures, guidance and controls.
• Supported cross-functional projects by updating terms and conditions (T&Cs) and privacy notices for go-to-market initiatives.
• Delivered weekly online GDPR training sessions to staff for over two years.
• Participated in discussions on AI-enabled products, focusing on privacy, data protection and regulatory considerations.

• Took a planned personal pause to manage family caregiving and homeschooling commitments during the pandemic, while staying updated on UK/EU privacy law developments.

IBM Promontory is a global leader in strategy, risk management and compliance consulting.

Key Achievements:

• Assisted in the development and implementation of end-to-end GDPR readiness programmes, toolkits and methodologies for clients across multiple sectors.
• Conducted records of processing activities (RoPAs) and privacy impact assessments using OneTrust; tailored privacy notices and drafted disclaimers for a global pharmaceutical company.
• Assisted in drafting organisation-wide data protection and privacy policies for a global pharmaceutical company.
• Assisted in drafting processes and procedures for responding to data subject access requests (DSARs) and delivered staff training for a major UK retailer.
• Mapped international data flows for a US-based retail brand to strengthen data protection compliance.
• Conducted weekly research into regulatory developments for a leading global social media company.

One of the UK's longest established specialist providers of legal, business and professional education.

• Oversaw production, updates, and quality assurance of legal education e-learning materials for LPC, GDL, and LL.M courses.
• Served as primary communication liaison with subject-matter experts and stakeholders.