ABOUT O’DOWD LEGAL

Clear legal advice for a digital world

O’Dowd Legal was established to help organisations navigate the complex legal and regulatory issues that come with technology, data and innovation. We offer a contemporary alternative to the traditional law firm, combining accessible and cost effective legal services, without compromising on quality, responsiveness or client care.

Founder & Principal, Keely O’Dowd, brings more than 15 years of legal expertise to every engagement, providing clear, pragmatic advice that helps her clients manage risk, meet legal obligations and achieve their objectives with confidence.

Prior to founding O’Dowd Legal, Keely was a senior lawyer with leading Australian and international law firms. She was also a commercial in-house lawyer with Commonwealth and Victorian government departments and agencies.

Keely is an author for LexisNexis Practical Guidance and adjunct lecturer with the College of Law.

EXPERIENCE THAT MATTERS

In-House Perspective

Former in-house lawyer with government departments and agencies, acquiring a deep understanding of how organisations operate and make decisions.

Senior Legal Expertise

Extensive experience advising executives, boards and project teams on complex technology, privacy, cybersecurity and artificial intelligence matters.

Commercial Focus

Combines strong legal skills with commercial acumen to provide advice that is practical, proportionate and aligned to a client’s goals.

Thought Leadership

Regular speaker, panellist and contributor on privacy, cybersecurity and emerging technology issues in Australia.

QUALIFICATIONS & MEMBERSHIPS

  • Bachelor of Arts / Bachelor of Laws, Monash University

  • Master of Laws, with Merit, The Australian National University

  • Graduate Diploma in Legal Practice, with Merit, The Australian National University

  • Graduate Certificate in Cybersecurity, La Trobe University

  • Certified Artificial Intelligence Governance Professional (AIGP) with the IAPP

  • Certified Information Privacy Manager (CIPM) with the IAPP

  • Law Institute of Victoria Member

  • International Association of Privacy Professionals Member (IAPP)

KEY HIGHLIGHTS

    • Advised a Victorian regulator on IT procurement related projects including, implementation of an online examination platform, identity verification platform, digital accreditation platform and human resources project.

    • Advised a Commonwealth agency in relation to procurements including HR & payroll outsourcing and website redevelopment. This work involved drafting and reviewing tender documentation and contracts.

    • Advised a health care service provider on the implementation of an electronic health records and practice management system. This work involved advising on procurement strategy, reviewing vendor software implementation and licensing terms and conditions.

    • Advised a peak sporting body on the implementation of a customer relationship management system. This work involved reviewing and negotiating a software implementation agreement with the vendor.

    • Advised a utility company on a customer transformation and systems integration project to upgrade its billing system. This work involved drafting a master services agreement and providing advice on statements of work and procurement strategy.

    • Advised a utility company on the procurement of enterprise resourcing software. This work involved reviewing and negotiating vendor software terms and conditions.

    • Advised an agribusiness company on its digital enterprise project to implement a new enterprise resourcing planning platform for its livestock, wool and insurance business.

    • Advised a leading on-demand food delivery platform on various compliance obligations under consumer, therapeutic goods and liquor licensing laws.

    • Advised an online marketplace platform on advertising standards, responding to advertising complaints and consumer safety laws.

    • Prepared a privacy impact assessment for a New South Wales Government agency in relation to the sharing of personal information between two New South Wales Government agencies and private sector companies.

    • Advised an asset management company on privacy compliance matters, including the application of foreign privacy laws, data retention obligations and privacy policy reviews.

    • Advised a property management company in relation to the disclosure of CCTV footage to a Victorian Government department and compliance obligations under surveillance devices and privacy laws.

    • Conducted a privacy health assessment in relation to a health insurance company's privacy compliance practices.

    • Advised a European based luxury fashion brand on Australian privacy laws compliance and management of its globally integrated customer database.

    • Advised a plumbing supplies distributor on privacy law compliance and data breach planning and response.

    • Advised an Australian professional soccer club on the disclosure of personal and sensitive information to its overseas affiliate clubs.

    • Drafted and negotiated memoranda of understanding and information sharing arrangements to facilitate the sharing and exchange of data between a Victorian regulator and other government agencies.

    • Advised various organisations on data breach planning and response. This work involved drafting and reviewing data breach response plans and checklists.

    • Regularly presented on cybersecurity governance, data breach response and cybersecurity laws at industry conferences and client workshops.

    • Assisted a fleet management company to manage and respond to a complex data breach. This work involved advising on mandatory notification obligations, drafting notifications to the regulator and affected customers and coordinating the completion of forensic investigations.

    • Advised various organisations on data breach and privacy incidents. This work involved advising on data breach notification and privacy obligations and drafting data breach notification documents.

    • Acted for a Victorian Government department in VCAT proceedings in relation to a privacy complaint involving the use of an AI system during a recruitment process.

    • Advised a plumbing supplies distributor on the implementation of a facial recognition technology solution.

    • Advised a Commonwealth agency on various AI initiatives, including the implementation of AI enabled voice biometric authentication solution, recruitment testing solution, contact centre call summary solution and digital translation solution. This work involved advising on the legal issues and risks arising from the adoption and use of these various AI solutions as part of the agency’s AI assurance process.

    • The Education Network, Building a Defensible Cybersecurity Framework for Your Firm, July 2026

    • Leo Cussen FOI and Privacy Conference, November 2019, May 2025 and May 2026

    • Women in AI Panel Discussion, October 2024

    • Australian Information Security Association (AISA) Cyber Conference, October 2018, 2022 and 2023

    • Panel: Living in a Post Notifiable Data Breach Scheme & GDPR World, Cyber in Business Conference, September 2018

    • Protecting Australia’s Critical Infrastructure in a Digital Age, Cyber Security in Government Conference, August 2018