Introducing Rebecca Shah – Solicitor in Commercial Law, Data Protection and Risk

27th May 2025

Admin

I am excited to be joining the Thrive Tribe. Thrive Law aligns with my personal values and I simply love the tagline “where people matter”. In a profession that is results driven, the personal touch is often lost, and yet, after working in-house for over 10 years I have found that my greatest successes have been born from collaboration with business stakeholders. We are all different and there are not enough workplaces that celebrate these differences and view them as strengths.

I have a broad range of professional experience with my key focus being commercial and data protection matters (more detailed information can be found in my bio). As well as advising in these areas I also offer training on these topics.

Bio

I am an experience in-house legal professional with a strong focus on strategic risk management, regulatory compliance and business-aligned legal solutions.

I have a proven track record in negotiating complex agreements, ensuring high standards of legal governance, and aligning legal strategy with commercial objectives. I am passionate about embedding legal functions that enable businesses to thrive whilst maintaining compliance and mitigating risk.

I believe that forming collaborative working relationships garner the best results.

Key Areas:

Commercial

Simplifying the contracting process: Review and draft suites of commercial documents that allow the business to thrive. Examples include, Terms and Conditions, Master Services Agreement, SaaS Agreements, Purchase Orders, and Subscription Terms.
Negotiation: Skilled at negotiating commercial agreements (both customer and supplier). Engages with businesses to draft legal playbooks for inhouse teams to drive clarity and efficiency in this area.
Process: Reviewing how businesses manage the onboarding of customers and vendors as well as the monitoring of key contract clauses (e.g. renewal dates, break clauses, termination rights). These areas are key for both compliance and retention of revenue.
Legal, Sales and Procurement Training: Teams that work cross functionally tend to get things done quicker. By training teams together, identifying pain points, and implementing clear processes around decision making the outcome is that time to contract is reduced. This has a direct impact on revenue.

Data Protection

Data Protection compliance: Skilled at identify gaps in data protection processes of businesses and implementing data privacy roadmaps to address issues of non-compliance, mitigating business risk.
Policies and Assessments: Provides advice and support in relation to the following policy areas:
- Data Protection and Security
- Data Retention
- Privacy and Cookies
- Legitimate Interest Assessments
- Data Protection Impact Assessments
- What to do in the event of a data breach
- Data Subject Access Requests
Processes: Provides advice for Customer Service teams that deal with personal data. Works with teams to define processes and SLAs.
Training: Offers training on the above policy areas as well as general data protection training required for employees.

Risk

Risk Frameworks: Advises on risk framework structures for businesses. How to start a Risk Management Framework and ensure that this can be managed by the business.

Qualifications