Staff Profile – Charlotte Bolt

To celebrate Charlotte’s well deserved promotion to Senior Data Privacy Officer (Paralegal), we quizzed her about her role as a paralegal, her thoughts on the challenges facing the data protection sector and, most importantly, what she loves most about working for DPAS (we think it’s our bubbly personalities and ‘healthy’ sense of competition during team sports!)

Hi Charlotte, Can you tell us a bit about your role at DPAS?

I am DPAS’s data protection paralegal.  I work as part of the consultancy team and I’m responsible for some of our DPO customers, as well as managing consultancy projects.  

Tell us a bit about a typical day in the life of a Data Protection Paralegal?

A typical day for me involves responding to client queries and undertaking audit and compliance work.

Outside of work, one of my hobbies is running – something I got into during lockdown. I try to go for a run most days and recently I completed my first official half marathon.

In your opinion, what challenges face those working in this sector?  

One of the challenges facing our sector is that there is a shortage in the supply of consultants, or those with data protection subject matter expertise in the southwest.

Why are you proud to work for DPAS?

I really enjoy working as part of the DPAS team because I love being given the freedom to take ownership of my work. I’m really proud of what we have achieved so far.

I’m also proud to have attained a comprehensive understanding of Data Protection law, even completing a BCS Practitioner in Data Protection course.

If you’d like to pick Charlotte’s brain about meeting the accountability principle, head to our article, or get in contact now.

Want to see more of DPAS behind the scenes? Meet our team! 

We also have staff profiles where you can learn more about Emma, our Office and Training Manager, and our newest members: Alex and Jack.

related posts

Alex Haslam

DPAS Data Protection Bulletin – October 2026

Welcome back to our monthly DPAS bulletin, where we cover the latest data protection news and developments from around the world.

Ever wondered how a routine government spreadsheet leak turns into a two-year covert court order? How about why the police might feel your mother-in-law’s contact details were key to national security? Have you ever pondered how many working weeks it takes to read a cookie banner? Whether Wall Street knows about your last GP visit? Or if you’re in Australia (g’day) why an AI is sending notes on your worst rashes to faraway cloud servers?

Read about all this and more in our latest DPAS Data Protection Bulletin.

Read More »
Halloween-themed illustration for a blog about GDPR audits and data protection risks
Melanie Garnett

Skeletons in the Server Room

The scariest data protection risks are the ones you can’t see. From zombie data to ghost suppliers, here’s how an independent GDPR audit helps you find what’s lurking and deal with it with confidence.
These documents may have been reviewed, and oftentimes approved at Board level. You might even require employees to sign that they have understood their responsibilities in them, but the question still remains. Are your data protection policies actually working?

Policy vs practice
Having policies in place and having effective data protection compliance processes are two very different things, and having policies is not indicative that you are meeting your obligations. Even the best policy does little to protect personal data or ensure compliance if staff don’t understand it, internal processes don’t reflect it, and no one checks if it’s followed.

Read More »
Melanie Garnett

Your data protection policies are written. Are they actually working?

While most organisations recognise internal policies such as a Data Protection, Data Breach, Retention, or Subject Access Request Policy, as vital components of the data protection compliance framework, simply having them written is only part of the equation.

These documents may have been reviewed, and oftentimes approved at Board level. You might even require employees to sign that they have understood their responsibilities in them, but the question still remains. Are your data protection policies actually working?

Policy vs practice
Having policies in place and having effective data protection compliance processes are two very different things, and having policies is not indicative that you are meeting your obligations. Even the best policy does little to protect personal data or ensure compliance if staff don’t understand it, internal processes don’t reflect it, and no one checks if it’s followed.

Read More »
Alex Haslam

DPAS Data Protection Bulletin – September 2026

Welcome back to our monthly DPAS bulletin, where we cover the latest data protection news and developments from around the world.

Ever wondered how a routine government spreadsheet leak turns into a two-year covert court order? How about why the police might feel your mother-in-law’s contact details were key to national security? Have you ever pondered how many working weeks it takes to read a cookie banner? Whether Wall Street knows about your last GP visit? Or if you’re in Australia (g’day) why an AI is sending notes on your worst rashes to faraway cloud servers?

Read about all this and more in our latest DPAS Data Protection Bulletin.

Read More »

Get a Free Consultation