Osman Mehmood

I'm currently delivering and improving information governance at Ofcom, including policies, audits, lifecycle management, information architecture, and Microsoft 365 guidance aligned with PRA, FOIA, DPA and UK GDPR.

Across Police Scotland, the Student Loans Company, Scottish Government, Home Office and NHS NES, I've led data protection, records management, assurance and compliance work. At Police Scotland, I delivered data protection reform under budget and within strict timeframes, including an Information Asset Register with over 5,000 assets and role-based training for over 22,000 officers and staff.

I've developed DPIAs, data sharing agreements, memoranda of understanding, risk assessments, privacy notices, retention standards and quality assurance frameworks. I regularly advise Data Protection Officers, SIROs, senior stakeholders and project teams on privacy risks, governance controls and legislative requirements.

I also bring leadership experience from heading the Scottish Government's Standards Compliance, Quality and Data Protection function, managing teams and supporting Ministers on legislation and data-sharing gateways.