Lucy Brown, CIPP/E, CIPM, CIPT



Associate Director | Data Protection Risk Management

Lucy Brown is the Deputy DPO and Senior Manager for Privacy at Asda Stores Ltd. Leading the Privacy agenda across one of the UKs largest retailers through a period of unprecedented change. Asda’s FUTURE Programme represents the biggest retail transformation the UK has ever known. As Asda separate from Walmart, we’re building a completely new, world-class retail technology landscape: eCommerce platforms, retail stores point-of-sale and inventory systems, supply chain, distribution and warehouse management systems, new buying and merchandising, financial and state of the art people systems as well as the latest in data and workplace technologies.


The Privacy Team are central to defining the world-class data and systems landscape, with particular focus on emerging technologies like SmartVision, Artificial Intelligence & Learning, enhanced Customer Insight and exciting new ways to engage our customers. As Deputy DPO, Lucy leads Asda’s Data Protection programme across Asda’s diverse formats & subsidiaries, redefining Privacy Standards & Policies, designing tools and processes for risk assessment, DSR response & incident management, leveraging relationships to deliver pragmatic & commercially focused risk identification and mitigation plans.


Lucy’s worked in Privacy since 2016, previously specialising in the HR data landscape for Walmart & Asda before moving to work within the Legal & Compliance team to lead Privacy Operations. Prior to this Lucy led on a variety of operational and strategic roles across the retail space. Based in Yorkshire, UK, Lucy balances professional life with a love for the great outdoors with her husband and two small, often muddy, children. 


Contributions by Lucy Brown

  • Member of Women Leading Privacy Advisory Board 2022 - 2023