Anne Njoroge

• Developed and implemented privacy policies to ensure compliance with relevant regulations.
• Conducted extensive research on data protection laws to inform organisational strategies.
• Collaborated with cross-functional teams to identify and mitigate privacy risks effectively.
• Reviewed contracts for privacy implications associated with various business arrangements.
• Proactively assessed and interpreted new and evolving privacy laws and regulatory guidance, including GDPR and DORA (Digital Operational Resilience Act), providing expert advice and recommendations to ensure ongoing compliance
• Managed compliance with EU Cloud Code of Conduct, Data Access Act, and Cyber Resilience Act by overseeing implementation and monitoring activities.
• Conducted and managed Privacy Impact Assessments and Transfer Impact Assessments to identify privacy risks.
• Streamlined Records of Processing Activities processes, enhancing efficiency and accuracy in documentation.
• Successfully refreshed 117 processing activities within six months, facilitating comprehensive compliance audits.

• I advise clients on Commercial Law (Non-contentious) matters, including data privacy, Intellectual Property, Companies and Partnerships, Franchise, Joint Venture, and SaaS Licence Agreements.
• Advised clients on complex legal matters, ensuring compliance with current legislation.
• Drafted and reviewed contracts and agreements with precision and attention to detail.
• Conducted thorough legal research to develop effective case strategies.
• Managed client relationships by providing timely updates and addressing concerns efficiently.

Spearheaded the development and implementation of a robust Record of Operational Activities (ROPAs) system which resulted in data minimization by 25% across the business. Built a compliance assessment framework to monitor and track assets that hold data to ensure compliance with storage and purpose limitations.

Accomplishments:

• Successfully rolled out a monthly training program that brings together Local Privacy Officers (LPOs) from Europe, The Americas, Africa, and Asia/Pacific to understand the implications of GDPR on the business, resulting in improved compliance practices and risk mitigation strategies.
• Developed tailored training sessions on data protection laws and use of the OneTrust privacy tool for our LPOs, leading to a better understanding of Privacy laws at a country level and passing the knowledge on to colleagues.
• Revised privacy policies and data processing agreements across the business, ensuring that Rentokil Initial acts as a Controller of data in 75% of all vendor agreements.
• Collaborated effectively with colleagues as part of a cohesive team to develop standardized compliance assessment frameworks, streamlined the audit process and venture into Generative AI, and explored the capabilities of Google’s VertexAI and now Gemini, creating our own chatbots and immersive experiences through VR.
• Managed the response to data breach incidents, ensuring timely notification to relevant authorities and affected individuals, minimizing legal and reputational risks.
• Conducted a cookie audit and with the assistance of the technical team, we managed to restructure the company’s cookie banner to comply with cookie regulations.
• Streamlined the data subject access request and data breach framework in the business to ensure that reporting, recording, remediation, and mitigation processes are actioned within the confines of the GDPR timelines.

• Provided expert legal advice on immigration matters, catering to diverse client backgrounds.
• Drafted and submitted immigration applications, ensuring compliance with current regulations.
• Represented clients in tribunal hearings, advocating for their rights and interests.
• Conducted extensive research on immigration laws to develop effective case strategies.
• Secured visa approvals for family reunification, addressing sole responsibility requirements for minor dependents.
• Advised Health and Social Care businesses on employer-sponsored visas, driving a 60% increase in overseas workforce.
• Handled complex tribunal cases, achieving favourable outcomes for clients facing deportation and unlawful detention.
• Established immigration clinics with self-help groups to offer pro bono legal advice to women asylum seekers.

• Acted for South Georgia Fisheries Limited in a Judicial Review application regarding £75 million Toothfish Licenses.
• Reviewed Deed of Settlement in high-profile secondary ticketing commercial matter involving AEG.
• Successfully drafted an appeal in possession matter with financial institution and construction company from Malta and Cyprus.
• Advised client on sale of company shares valued at £500,000, fostering strong transactional relationships.

• Assisted individuals and families in securing social housing by advising on eligibility and applications.
• Advised landlords and tenants regarding disputes over rent arrears and eviction notices.
• Engaged in policy advocacy to enhance Scottish housing laws for affordable and secure housing.
• Provided input to local government consultations and participated in housing law reform initiatives.
• Spearheaded outreach programs to educate homeless individuals on their rights under Scottish legislation.