About me

I’m Sofia Carroll, a data protection practitioner based in the UK. This blog combines two of my biggest passions – privacy and writing.

I had planned to be a solicitor and did an LLB in Law at the University of Essex, but realised I only wanted to focus on information law.

I followed my interest and completed an LLM in Intellectual Property and Information Law at King’s College London in addition to obtaining a Practitioner Certificate in Data Protection (PC.dp) and becoming a Certified Information Privacy Manager (CIPM).

I have seen and understand all perspectives having been:

  • corporate in-house DPO

  • outsourced public-sector DPO

  • GDPR advisor in an animal charity

  • lead case officer at the ICO.

I was also an Associate Assessor for the Data Protection and Information Governance Practitioner Apprenticeship awarded by the British Computer Society.

In 2026, I was shortlisted for the PICCASO Author / Creator of the Year Award with my writing on Sofia Privacy.

I treat data protection compliance as a strategic asset, not just a legal requirement, and privacy as part of being a good human. I hope Sofia Privacy helps curious readers see it that way too.