Carey Lening

Privacy Cassandra

Twenty years making sense of the mess where law, technology, and policy collide. Currently freelancing, writing, and asking uncomfortable questions.

Let's Talk

The Short Version

I gravitate towards hard problems that don't have easy answers — particularly the legal, technical, and policy kind. I've spent two decades advising on data protection, privacy and technology law, information security, and the ever-growing list of disciplines that sit at their intersection.

I've gotten really good at identifying where things break down: in organisations, in systems, and in the gap between what the law says and what technology actually does. I explain complex things in plain language, and I do it for lawyers, engineers, regulators, and executives — sometimes all in the same room.

My cross-functional background means I'm equally at ease hashing out technical details with security engineers, parsing regulatory nuance with legal teams, or giving the C-Suite a version they'll actually read. I also think I'm funny, which helps more than you'd expect.

What I Do

Data Protection & Tech Advisory

AI governance, privacy-enhancing technologies, and the futuretech questions your legal team isn't asking yet.

Legal & Technical Assessments

Data protection impact assessments, fundamental rights reviews, and the kind of analysis that actually holds up under scrutiny.

Privacy Program Development

Building privacy programs that work in practice, not just on paper. Policies, processes, and the organisational muscle to back them up.

Risk Assessments

Identifying what can go wrong before it does. Practical risk analysis for organisations that take their obligations seriously.

Writing & Speaking

Keynotes, panels, articles, and analysis on tech, law, and policy. Complex topics, made accessible — and occasionally entertaining.

Privacat Insights

I write a (mostly) weekly newsletter about the interplay between complex systems and the people, policy, and processes that shape them. It covers data protection, fast-moving technology trends, and the legal and policy decisions made in response.

It's pretty wonky stuff, but I try to make it accessible, interesting, and occasionally jaded. If you want the version of tech-and-privacy coverage that doesn't talk down to you, this is it.

Read Privacat Insights

What to Expect

Deep dives into privacy disasters, AI implications, regulatory shifts, and the occasional rant about corporate accountability.

Get in Touch

I'm always interested in complex problems, speaking engagements, and conversations with people who care about getting this stuff right.