Shaista Peart
Senior Data Privacy & Information Governance Consultant
Practical privacy and information governance for organisations that need more than policies.
- Data Protection
- Information Governance
- DPO Services
- Healthcare & Regulated Environments
Overview
Shaista Peart is a Senior Data Privacy and Information Governance Consultant at IG-Smart.
Her work focuses on helping organisations translate data-protection and information-governance obligations into practical arrangements that can operate across real organisations, technologies and services.
Shaista has experience advising healthcare technology, health and social care and other organisations on information governance and privacy, as well as undertaking Data Protection Officer responsibilities.
Areas of Expertise
Shaista's areas of expertise include:
- UK GDPR
- Data protection
- Information governance
- Data Protection Officer services
- Privacy governance
- Healthcare information governance
- Data Protection Impact Assessments
- Information risk
- Privacy policies and procedures
- Records governance
- Data lifecycle management
- Privacy training
- Accountability
- Compliance monitoring
Privacy that works operationally
A privacy programme can appear mature on paper while operating very differently in practice.
Strong privacy governance requires organisations to connect:
law + policy + technology + people + processes + evidence
Shaista's work focuses on helping organisations make those connections.
This can involve everything from assessing a new technology or supplier to developing governance frameworks, completing DPIAs, advising operational teams and supporting executive decision-making.
Data Protection Officer Support
The DPO role can require an unusual combination of:
- Legal interpretation
- Independence
- Risk judgement
- Organisational awareness
- Communication
- Technical understanding
- Regulatory knowledge
Shaista's experience includes serving in Data Protection Officer roles and supporting organisations requiring ongoing privacy oversight.
IG-Smart's Managed DPO & Privacy Office model can extend this approach across broader organisational requirements rather than limiting support to ad hoc compliance questions.
Healthcare Information Governance
Health and social care organisations operate within particularly complex information environments.
They may need to balance:
- Confidentiality
- Data protection
- Information security
- Clinical requirements
- Data sharing
- Research
- Innovation
- Patient expectations
- Regulatory requirements
Shaista's experience in healthcare and HealthTech information governance contributes to IG-Smart's multidisciplinary health assurance model.
Data Protection Impact Assessments
DPIAs are sometimes treated as administrative documents required before a project can proceed.
Used properly, they are governance tools.
A strong DPIA should help an organisation understand:
- What processing is proposed
- Why it is necessary
- Who may be affected
- What risks exist
- What controls are required
- Who accepts residual risk
- What evidence supports the decision
Shaista supports organisations in applying that more substantive approach.
Professional Development
Shaista's professional background includes:
- International Association of Privacy Professionals privacy certification
- Chartered Management Institute Level 5 Diploma in Professional Consulting
- BA (Hons) Business and Management
Her combination of privacy, consulting and business experience supports a practical approach to governance.
From compliance activity to accountability
Regulators increasingly expect organisations to demonstrate accountability rather than simply possess policies.
That means being able to show:
- What decisions were made
- Who made them
- What risks were identified
- What controls were implemented
- What evidence exists
- Whether arrangements continue to operate effectively
This evidential approach is central to IG-Smart's wider assurance philosophy.
Work with Shaista
Shaista can support organisations requiring:
- DPO support
- Privacy programme development
- Information governance
- DPIAs
- Policy development
- Privacy risk assessment
- Healthcare IG
- Data governance
- Compliance reviews
- Training and awareness
Relevant Services
Need practical privacy or information-governance support?
Talk to IG-Smart about your governance, risk or assurance requirements.