Staff Profile – Emma Richards

We’re continuing our staff profile series because, well, it’s a Wednesday and frankly that’s reason enough for us to rave about our incredible team at DPAS. 

We sat down with Office and Training manager Emma to discuss the vital role she plays within our team and her exciting plans for the future. 

Hi Emma, can you tell us a bit about your role at DPAS? 

As the office and training manager, the main functions of my role involve facilitating all training courses, being the main point of contact for the delegates joining our courses, and assisting our CEO, Melanie Garnett, with the operational side of the business. Since joining the business I have successfully managed projects to implement two new software systems for both staff and client management.

Tell us a bit about a typical day in the life of an office and training manager?

Depending on whether there is a training course running or not, determines the start of my day. If there is, I jump on the session with the trainer early to make sure everything works and is ready for the delegates. If not, it’s a bit more of a leisurely start.

Other than that, no one day is the same as the next. Due to the operational support I provide to the company, I could be working on any given project at varying stages of their lifecycle.

The most vital part of my role though, is making sure that the team is kept in constant supply of Cola and biscuits!

Why are you proud to work for DPAS? 

DPAS is a young and vibrant company, and the people that work here all have a passion for data protection and information governance.

It’s a company that puts their staff at the heart of what they do, supporting their achievements, both personally and professionally. They ensure everyone, no matter their role, feels valued.

Can you tell us about one goal you have, outside of work, for the near future? 

Outside of DPAS, I have achieved a Level 2 Certificate in Gym Instructing and am currently working towards a Level 3 Diploma in Personal Training. It is my aim to have a small client base in my spare time, helping them to achieve their fitness goals.

If you’d like to meet more of the team then you can view the rest of us here! We also have staff profiles where you can learn more about Charlotte, our Senior Data Privacy Officer (Paralegal), and our newest members: Alex and Jack.

 

related posts

Alex Haslam

DPAS Data Protection Bulletin – October 2026

Welcome back to our monthly DPAS bulletin, where we cover the latest data protection news and developments from around the world.

Ever wondered how a routine government spreadsheet leak turns into a two-year covert court order? How about why the police might feel your mother-in-law’s contact details were key to national security? Have you ever pondered how many working weeks it takes to read a cookie banner? Whether Wall Street knows about your last GP visit? Or if you’re in Australia (g’day) why an AI is sending notes on your worst rashes to faraway cloud servers?

Read about all this and more in our latest DPAS Data Protection Bulletin.

Read More »
Halloween-themed illustration for a blog about GDPR audits and data protection risks
Melanie Garnett

Skeletons in the Server Room

The scariest data protection risks are the ones you can’t see. From zombie data to ghost suppliers, here’s how an independent GDPR audit helps you find what’s lurking and deal with it with confidence.
These documents may have been reviewed, and oftentimes approved at Board level. You might even require employees to sign that they have understood their responsibilities in them, but the question still remains. Are your data protection policies actually working?

Policy vs practice
Having policies in place and having effective data protection compliance processes are two very different things, and having policies is not indicative that you are meeting your obligations. Even the best policy does little to protect personal data or ensure compliance if staff don’t understand it, internal processes don’t reflect it, and no one checks if it’s followed.

Read More »
Melanie Garnett

Your data protection policies are written. Are they actually working?

While most organisations recognise internal policies such as a Data Protection, Data Breach, Retention, or Subject Access Request Policy, as vital components of the data protection compliance framework, simply having them written is only part of the equation.

These documents may have been reviewed, and oftentimes approved at Board level. You might even require employees to sign that they have understood their responsibilities in them, but the question still remains. Are your data protection policies actually working?

Policy vs practice
Having policies in place and having effective data protection compliance processes are two very different things, and having policies is not indicative that you are meeting your obligations. Even the best policy does little to protect personal data or ensure compliance if staff don’t understand it, internal processes don’t reflect it, and no one checks if it’s followed.

Read More »
Alex Haslam

DPAS Data Protection Bulletin – September 2026

Welcome back to our monthly DPAS bulletin, where we cover the latest data protection news and developments from around the world.

Ever wondered how a routine government spreadsheet leak turns into a two-year covert court order? How about why the police might feel your mother-in-law’s contact details were key to national security? Have you ever pondered how many working weeks it takes to read a cookie banner? Whether Wall Street knows about your last GP visit? Or if you’re in Australia (g’day) why an AI is sending notes on your worst rashes to faraway cloud servers?

Read about all this and more in our latest DPAS Data Protection Bulletin.

Read More »

Get a Free Consultation