The Privacy Practice is led by Director James Leaton Gray.

We work closely with a number of specialist companies to provide a targeted service for each client.

We believe that bespoke services should be created by specialists in particular areas, and with that philosophy in mind we build strong links firms that provide complementary services to the Privacy Practice’s areas of expertise.

Deloitte Consulting


Working with leading organisations, governments and commercial bodies, our role is to unlock potential for growth and innovation, and create long-term, sustainable impact.

Kemp Little Consulting

kemplittleconsultingKemp Little Consulting LLP is a new, innovative consultancy operating at the intersection of technology, law and consulting. In combination with Kemp Little LLP – the leading technology and digital media law firm – we undertake strategy through to delivery of projects.

Kemp Little LLP

kemplittleThe leading technology & digital media law firm. Kemp Little are known for their ability to serve the very particular needs of a large but diverse technology client base. Their hands-on industry know-how makes them a good fit with many of the world’s biggest technology and digital media businesses, yet means they are equally relevant to companies with a technology bias, in sectors such as professional services, financial services, retail, travel and healthcare.

Control Shift Ltd 

ctrl-shift-logo-431x139Ctrl-Shift are a specialist consultancy helping organisations to prosper in the new digital economy by using information in the hands of the individual to build a trusted strategic market position through trusted digital services.

James Leaton Gray Biography

An expert in Privacy and Data Protection who uniquely combines this with knowledge and experience in business strategy, policy and press management.

At the Privacy Practice James provides consultancy services in Data Protection and Privacy. A leading thinker in the policy debates in this vital arena, he is regularly invited to address conferences in the UK and internationally. He specialises in making compliance part of business operations, not a legal tick box exercise. He writes the Privacy Practice Blog shining light onto current issues in Privacy.

For over 10 years James lead the BBC’s Information Policy and Compliance Department, in the BBC’s Legal section. There he oversaw the operation of the Corporation’s systems for compliance with the Data Protection and Freedom of Information Acts. Before he left the BBC he led the development of privacy and data governance for myBBC as it developed its big data capability. Additionally he provided expert advice on media and privacy and lobbying on the proposed EU GDPR.

Before that he had a wide variety of management roles including overseeing projects to ensure the BBC’s impartiality during elections and the introduction of staff multi-skilling in areas of BBC News. Before joining the legal section he was a programme maker and spent much of his time in political journalism. He edited many of the BBC’s Political and Parliamentary programmes including Today/Yesterday in Parliament, The Week in Westminster, Westminster Live, and the documentary series Scrutiny.

He was one of the first staff members to be invited to take part in the BBC’s MBA programme. He is a former Chairman of the Strategic Planning Society, and is a member of BAFTA and the Royal Television Society. He is on the editorial board of Data Protection Law & Policy.

The Privacy Practice is a trading name of Leaton Gray Ltd, a company registered in England and Wales, No. 9670203