Tech Policy Expertise: Cybersecurity

  • Kathleen McGrath

    Kathleen McGrath holds the position of Privacy and Data Policy Manager for the Centre for Information Policy Leadership in London. Her work focuses on a range of privacy and data related issues such as in Artificial Intelligence, protecting minors online and data governance. Before joining CIPL, Kathleen worked in Knowledge Management at a silver circle law firm in their data protection and cyber security team where Lovells where she was responsible for conducting long term research, in-depth global horizon scanning and discrete research tasks for lawyers across the world. She produced numerous articles for publications such as the Institute of Privacy Professionals, Privacy Laws and Business and others in global data policy, including UK data protection laws, artificial intelligence, cyber security, and international digital cooperation. She has also previously worked in-house in data protection compliance for large organizations in the auditing industry as well as in the financial industry, where she was responsible for creating accountability processes to ensure the business complied with data protection laws.

  • Kat Sommer

    Kat Sommer is the Group Head of Government Affairs & Analyst Relations at global cyber security company NCC Group. In this role, she leads the company’s political engagement, and government relations, educating policymakers on cyber security realities and shaping a conducive operating environment for cyber security professionals. She also oversees NCC Group’s analyst relations engagement, acting as an interpreter between technical, policy, and analyst communities. She has represented NCC Group in international discussions such as the Pall Mall Process, on the keynote stage at industry conferences like Infosecurity, and in parliamentary committee meetings. She also regularly contributes to industry discussions, including NCC Group’s Cyber Policy Radar webinars and sector events, providing insights into evolving cyber regulations.

  • Jessica Zucker

    Jessica Zucker is a senior technology policy leader currently serving as Director of Online Safety Policy at Ofcom, where she co-leads a 120-person team implementing the UK’s groundbreaking Online Safety Act. With over a decade of experience at the intersection of technology, policy, and safety, she has shaped global approaches to safety governance, content moderation, and platform accountability.

    At Ofcom, Jessica manages regulatory frameworks for major tech platforms, pioneered transparency reporting standards, and led crisis response during critical public safety events. Previously, as Head of Misinformation Policy for EMEA at Meta and the global Head of Health Misinformation Policy, she created global policies affecting 2+ billion users and managed high-stakes decisions during COVID-19, elections, and international conflicts.

    Her career spans leadership roles at Microsoft, where she developed cybersecurity strategies and trained over 1,000 election officials across the EU, and the U.S. State Department’s Cyber Policy Office. A Fulbright Scholar and Harvard Kennedy School graduate (M.A. Public Policy), Jessica began her career founding an education nonprofit in South Korea.

    Known for driving organizational transformation and building strategic partnerships, Jessica regularly testifies before Parliament, speaks at major conferences, and serves as a media spokesperson on safety and online harms.

  • Jessica Mills

    Jessica Mills is a digital policy specialist with expertise in data governance, cross-border data flows, and regulatory engagement. She has led global advocacy initiatives with governments and regulators, contributed to flagship policy reports, and coordinated multistakeholder forums on digital rights, child online protection, and telecom fraud prevention. Jessica has a strong track record of translating complex policy issues into actionable strategies and is passionate about building inclusive, rights-respecting digital ecosystems.

  • Hyeona Kim

    I’m a mission-driven Policy & Program Manager with a global track record across tech, public affairs, and regulatory compliance. At TikTok, I’ve led governance, risk, and compliance (GRC) efforts in monetization, streamlining policy operations while navigating complex global regulations.

  • Helen Sithole

    Helen Sithole, the Legal and ICT Policy Officer for MISA Zimbabwe, is a dedicated legal professional with extensive experience in policy research, tech law, and information rights. Having recently completed a Master’s degree in Intellectual Property & Technology Law, she brings solidified expertise in emerging areas such as AI governance, data privacy, and digital ethics. Her background positions her as a crucial voice in shaping the future of responsible technological advancement, particularly concerning digital human rights and the intersection of technology with societal well-being. She is particularly passionate about translating complex legal concepts into accessible policy recommendations that foster innovation while safeguarding individual liberties in the digital realm.

  • Dr Erin Young

    Dr. Erin Young is Head of Innovation and Technology Policy at the Institute of Directors where she leads the IoD’s policy, strategy and thought leadership work on technology, science and innovation. Before joining the IoD, Erin was Project Co-Lead and Research Fellow in Public Policy at The Alan Turing Institute, where her work influenced the UK’s National AI Strategy and AI Opportunities Action Plan. Previously, Erin held positions at the UN in Paris, WPP in London, MediaX at Stanford University, and Thomson Reuters in New York City. She sits on the Strategy Steering Board for the City of London Corporation’s Women Pivoting to Digital Taskforce and advises the Hg Foundation on AI, inequalities and skills. Erin holds a BA from the University of Cambridge, an MSc in Education (Learning and Technology) from the University of Oxford, a PGC in International Business Practice, Finance and Organisational Behaviour, and a DPhil in Science and Technology Studies from the University of Oxford.

  • Danushi Peiris

    I am a Regulatory Affairs Manager at a leading UK internet service provider (ISP), focussing on digital policy and regulation, including cloud services, digital markets, content distribution and net neutrality. I have an interest in technology policy relating to the technology, media and telecommunications (TMT) industries.

    I have experience in UK government working on digital policy. At DCMS, I worked on understanding and designing economic incentives to encourage cyber resilience in organisations across the UK. I also lead on cyber insurance and worked on the cyber resilience legislative package.

    My work in technology policy is based on my academic background in business, science and policy. I hold an MPhil in Technology Policy from the University of Cambridge, including a capstone project with DCMS. I also hold a BSc Advanced – Global Challenges (First Class) degree from Monash University Australia.

    Drawing on my business and scientific understanding, I worked in science strategy consulting at Australia’s National Science Agency CSIRO (The Commonwealth Scientific and Industrial Research Organisation) across a range of industries including healthcare, energy and education.

  • Claire Penketh

    I’m a former BBC journalist who began my career in local radio before spending four years in Hong Kong during and after the handover to China. I was a news producer and documentary maker for a Chinese TV station and covered the handover itself and the early rise of political dissent. As press freedoms became increasingly restricted, I chose to return to the UK, where I produced and reported for BBC World Service, including presenting the global affairs programme Analysis.

    After becoming a single parent at 42, I took redundancy and retrained as a teacher to find a more conducive work-life balance. I taught broadcast journalism at university and college level. I went on to found and run a community radio station in rural southwest England, which was on-air 24/7. As a not-for-profit with over 100 volunteer presenters, we secured grant-funding to deliver media and basic IT training, with a strong focus on empowering disadvantaged communities. With a heavy heart I stepped away in 2011 after nearly four years, when funding for such programmes, and therefore my post, was cut due to the austerity measures of the coalition government.

    I returned to journalism and the World Service as a freelancer and took on short-term PR contracts before joining BCS, The Chartered Institute for IT, in 2018. Since then, I’ve transitioned from PR into policy—a move that reflects my belief that careers are always evolving. My mantra is simple: embrace change, stay curious, and keep learning—because that’s the key to staying relevant and doing work that matters.

    Being an older woman in tech has its challenges, but it’s also been a chance to grow, adapt and hopefully inspire others along the way. I’ve gone from reporting on major world events to helping shape the national conversation around technology and policy during a time of huge change. It’s incredibly rewarding to share what I’ve learned and to support others—especially women—on their own journeys into this fast-moving and fascinating sector.

  • Ashly Jiju

    Ashly Jiju is a researcher and policy professional specialising in geopolitics and technology policy, with a focus on artificial intelligence and data protection. Drawing on experience across the UK, UAE, India, and Nepal, she bridges academic research, stakeholder engagement, and strategy consulting to thoughtfully address the complexities of technological change.

    She holds an MPhil in Politics and International Studies from the University of Cambridge, where her research focused on how AI and big data reshape privacy, security, and global governance. She also holds a BA (Hons.) in Political Science with Economics from Lady Shri Ram College for Women, University of Delhi. She is dedicated to advancing innovation that benefits society through thoughtful and ethical governance.

    Ashly has played a key role in advancing high-impact initiatives addressing complex challenges in technology and governance. She has engaged with governments, companies, NGOs, and international bodies to craft strategies, lead research, and drive policy development. Her work includes contributing to multiple books and policy reports, advising a rapidly expanding digital media startup, and leading large-scale fundraising efforts for projects focused on digital inclusion and worker support. She has led sizeable, cross-functional teams and designed digital safety programmes that have empowered thousands to engage confidently and safely in digital spaces.