Paul is a Principle Research Engineer with the Information Security and Privacy Group, a part of Data61, CSIRO. Paul leads the Data Privacy team which conducts R&D in methods for controlling privacy risk, particularly with a proven level of privacy. Paul has a focus on bringing this privacy and security research to the broader data ecosystem. This includes the development of the R4 (Re-identification Risk Ready Reckoner) software for analysing and managing re-identification risk. Paul has used his expertise to help Australian government agencies and companies understanding privacy risk in their data and to help them take action to control that risk.