Andrew is a partner specialising in all aspects of data protection and privacy work including data protection audits, data security incidents, cross-border data transfers, outsourcing arrangements, subject access requests, direct marketing and general data protection and freedom of information compliance. He also advises on information technology projects including in relation to outsourcing, ecommerce and consumer law matters.

Andrew is a trainer on the PDP data protection practitioner's course. He also advises the Interactive Media in Retail Group (the UK online retail association) on data protection and ecommerce matters. He is a member of the Society for Computers and the Law and regularly contributes articles to academic and trade publications.