Vivienne Artz

Chief Privacy Officer, Refinitiv, UK

Vivienne Artz joined Refinitiv (formed from the Financial and Risk business of Thomson Reuters) as the Chief Privacy Officer in November 2017, based in London, leading the global Privacy Team and overseeing global privacy strategy and practice. Previously, Vivienne was a Managing Director and Global Head of Privacy Legal and Head of International for the Intellectual Property and Technology Law Group in the General Counsel’s Office at Citi in London. Prior to joining Citi in 2000, Vivienne worked in private practice in London. Vivienne chairs the International Regulatory Strategy Group Data Working Group and is on the Board of Directors of the International Association of Privacy Professionals (IAPP), having previously served on IAPP European Advisory Board and been co-chair of the IAPP Knowledge Net for the UK. Until recently, Vivienne was the chair of the AFME Data Protection Working Group, and participated in the UK Finance Data Protection Working Group. Vivienne is also on the Business and Law Advisory Board of St Mary’s University in the UK. Vivienne is the current President of Women in Banking and Finance, having been awarded the “Champion for Women” Award at the Women in Banking and Finance Awards for Achievement 2016. Vivienne has many years of experience leading a broad range of diversity initiatives and groups both within firms and across sectors.

Carl Blake

Legal Director, Bupa Global, UK

Carl joined Bupa in October 2014 and became the Legal Director for Bupa Global in December 2017, with responsibility for legal risk matters across the business with a team of 14 lawyers covering matters including privacy and data protection, product and marketing, sales and distribution, customer services, digital and IT systems, and contentious matters. Prior to this Carl spent three years at Royal Sun Alliance (RSA) in a number of positions within the Group Centre and Emerging Markets legal teams, including as General Counsel, Central and Eastern Europe and the Middle East, for which Carl was responsible for running a team of 11 lawyers and compliance officers dealing with a variety of legal and regulatory matters across those jurisdictions. Prior to RSA, Carl was a Senior Associate at the international law firm Clifford Chance in the Corporate Finance team.

Max Bleyleben

Managing Director and Chief Privacy Officer, SuperAwesome, UK

Experienced technology industry executive with a demonstrated history of creating new market categories, managing rapid growth, scaling business functions internationally, and devising and executing optimal financing and M&A strategies. Specific expertise in kidtech, data privacy, enterprise software, consumer mobile applications, cord-cutting and the emergence of OTT, eCommerce, telemedicine, digital media, and emerging markets. Strong finance professional with a MBA from INSEAD.

John Bowman

Senior Principal, Promontory, UK

John is a Senior Principal in Promontory's privacy and data protection team. John advises clients on all aspects of compliance with data protection laws and regulations. He is a specialist on the European Union’s General Data Protection Regulation (GDPR). Prior to joining Promontory, John worked at the U.K. Ministry of Justice where he was the government’s lead negotiator on the GDPR. This work involved leading the U.K. delegation to the Council of the European Union’s DAPIX expert working group in Brussels, developing the government’s policy position on the GDPR, engaging with a wide range of stakeholders and advocates, and regularly briefing ministers. John also represented the U.K. at the European Commission's Article 31 Committee, which is responsible for determining the adequacy of non-EU data-protection regimes. He earlier represented the U.K. government in negotiations on reviewing The Hague Conventions on International Child Abduction and led the government’s outreach to domestic Muslim communities on issues related to family law. John also carried out a comprehensive review of the U.K.’s claims management regulatory regime for the Ministry of Justice. John is a regular speaker on data protection matters and has had articles published by Privacy Laws and Business, Bloomberg BNA, IAPP and the European Data Protection Law Review.

Garreth Cameron

Data Protection Officer, EMEA, Dentsu Aegis Network, UK

Garreth Cameron is the Data Protection Officer for Europe, Middle East and Africa at Dentsu Aegis Network, a global marketing services group built for the digital economy. Prior to joining Dentsu Aegis, Garreth was the Group Manager for Business & Industry at the UK Information Commissioner’s Office where he was responsible for managing the ICO’s strategic relationships with the private sector and economic regulators, in addition to helping develop data protection policy. Before the world of data protection and privacy called, Garreth had a successful career in consumer protection enforcement.

Lien Ceulemans

Vice President and Associate General Counsel, Global Privacy, Salesforce, UK

Lien Ceulemans joined the salesfore.com legal team in 2012, and has since progressed Vice President, Global Head of Privacy, managing a large team of privacy experts worldwide. As part of this role, she determines Salesforce’s international privacy and data protection strategy relating to the GDPR, the NIS Directive, the California Consumer Privacy Act and the E-Privacy Regulation, among others. Prior to joining Salesforce, and both before and during her studies, Lien worked in renowned Belgian and San Francisco based law firms as a technology and privacy lawyer. She was also a teaching assistant at the law school of the University of Leuven, Belgium.

She attended law school at the Catholic University of Leuven (Belgium) and Deusto University (Bilbao, Spain), and pursued an additional Masters in Intellectual Property law from the Catholic University of Brussels (Belgium) in 2007. She received her LLM in Law, Science and Technology from Stanford University Law School (US) in 2009. Lien has since studied for several further certifications, including the CIPP/E (privacy professionals) qualification.

Lien is fluent in Dutch, English, French and Spanish. For her studies in the US, she was awarded a Fulbright, Belgian American Educational Foundation Honorary and Rotary International Fellow scholarships. She also won the American Women's Club of Brussels Award and the Ambassador Fox Award. During her time at Salesforce, Lien has won several individual and leadership awards for her great contributions to the business. In addition to this, she is also a champion of equality and was the Vice President of the Salesforce Women’s Network for EMEA

Guy Cohen

Policy and Strategy Lead, Privitar, UK

Guy works at Privitar, a privacy engineering software company, where he is the policy and strategy lead. Guy works on issues of data protection regulation, standards and frameworks, and data ethics. In addition to his role at Privitar, Guy is a fellow at Cambridge University’s Centre of Science and Policy, a member of the recent Royal Society Privacy Enhancing Technologies Working Group, and technical editor for the IEEE Data Privacy Process Standard.

Paul Comerford

Senior Sales Manager, Trunomi, UK

A seasoned technology specialist, with a background in marketing and a deep interest in ethics, Paul has an acute understanding of how to use the latest tech to hold the tension between harnessing the power of data, while ensuring a persons privacy continues to be the first priority. "My first love are my wife & children, second to those, utilising technology to help shape the digital landscape into a safer place for them."

Debbie Evans

Data Protection Professional & Lawyer, Kincordia Limited, UK

Currently work as the Global Data Protection Officer for Rentokil-Initial, where she is responsible for implementing a data protection compliance program to over 70 countries. She has provided support to the public and private sector, such as the police, MOD, Virgin Media, Siemens and Fujitsu. Areas of expertise include technology, security, privacy and commercial management. Practised as a barrister over 20 years ago and now trying to strike more of a work life balance! Tries to pack as much variety into the day as possible – enjoys spending time with her family and recently started playing ice hockey in a premier league team!

Olga Ganopolsky

General Counsel - Privacy and Data, Macquarie Group, Australia

Olga Ganopolsky is the General Counsel – Privacy and Data at Macquarie Group Limited. Macquarie Group is a global financial services provider. It acts primarily as an investment intermediary for institutional, corporate and retail clients and counterparties around the world. Macquarie, headquartered in Sydney, has more than 70 office locations across 28 countries.

Olga is a seasoned privacy and regulatory lawyer and has had extensive experience in most things data and privacy, ranging from building privacy facing compliance frameworks and functions, defending class actions and other litigation, conducting privacy audits and advising on complex data structures and commercial arrangements where data is a vital and valuable asset. In the last few years, much of Olga’s work has involved the privacy law reform process, culminating in the far reaching changes introduced by the General Data Protection Regulation and the introduction of mandatory breach reporting under the Privacy regime in Australia and the implementation of those reforms in a variety of commercial settings.

Until June 2014 Olga was the General Counsel and Company Secretary of the Veda Group Limited (as it was then, now Equifax). Equifax is the operator of Australia’s largest and oldest consumer credit reporting business, a commercial credit reporting business and a number of other data driven business in Australia, New Zealand and parts of Asia and the Middle East. Prior to joining the Veda Group in 2006, Olga was in private practice, specialising in employment law, litigation and privacy and data related issues.

Olga is the Chair of the Privacy Committee of the Law Council of Australia and a member of the Privacy and Data Committee of the Law Society of New South Wales. She is also Australia’s representative on the SWIFT data protection working party and a former director of the International Association of Privacy Professionals (ANZ).

John Grant

Civil Liberties Engineer, Palantir Technologies, USA

John joined Palantir Technologies in September 2010 as the company’s first Civil Liberties Engineer. Previously, John served for nearly a decade as an advisor in the United States Senate. He began his career in the Senate as an aide to Senator Peter Fitzgerald before joining the staff of former presidential candidate and member of the Senate Republican leadership, Senator Lamar Alexander. While working for Senator Alexander on issues ranging from the federal budget to homeland security, John attended law school at Georgetown University. He earned his law degree shortly after joining the staff of the Senate Homeland Security and Governmental Affairs Committee. As Counsel to Ranking Member Senator Susan Collins, John handled the Committee’s intelligence and privacy and civil liberties portfolios. He conducted oversight of numerous programs within the Department of Homeland Security and the U.S. intelligence community as well as investigations into intelligence failures that led to the attacks at Fort Hood and the failed 2009 Christmas Day bombings. As a Civil Liberties Engineer at Palantir, John has worked with customers all over the world, helping them to develop data protection practices that make the best use of Palantir’s privacy and civil liberties protective capabilities. John is a co-author of The Architecture of Privacy (O’Reilly 2015) and most recently co-authored a chapter in The Cambridge Handbook of Consumer Privacy, “A Marketplace for Privacy: Incentives for Privacy Engineering and Innovation.” (Cambridge UP, 2018)

Tina Maisonneuve

Global Privacy Counsel, GlaxoSmithKline, UK

Soumya Patnaik

Data Protection Consultant, Privacy Perfect, Netherlands

Soumya Patnaik is a data protection consultant at PrivacyPerfect. Throughout her career, she has had extensive experience assisting multi-national organisations in navigating privacy laws across jurisdictions. Prior to joining PrivacyPerfect, she completed an LL.M in Advanced Studies in Law & Digital Technologies, from Leiden University, where she graduated top of her class. She is a qualified advocate, registered with the Bar Council of India and has practised law for several years at a leading law firm based in India, with a primary sector focus on knowledge-based industries. During this time, she advised numerous global tech giants as well as start-ups on diverse issues ranging from foreign investment and market entry strategy, to cross-border transactions involving international data transfers. Soumya has been ranked as a Next Generation Lawyer by Legal 500 Asia-Pacific. Clients value her practical approach to legal advice, broad international experience and hands-on attitude.

Ioan Peters

EMEA Team Lead and Associate Managing Director for Incident Response, Kroll, UK

Ioan Peters is an Associate Managing Director in Kroll’s Cyber Risk practice, based in the London office. He is responsible for cyber incident response services for Kroll in EMEA. Ioan has nearly 20 years of experience leading transformative information technology projects that have better enabled business operations and managed risks in organisations as diverse as law enforcement, the UK government, and blue-chip companies. His experience includes serving as a representative of the UK Government, for which he has worked bilaterally and multilaterally as a senior manager and consultant on matters relating to intellectual property protection, both in the country and abroad.

Ioan joined Kroll from Airbus Group, where as Head of Security Audit, Corporate Security, he was responsible for ensuring the effectiveness of security controls across the Group, including critical human factors, in defending people, assets, and intellectual property from diverse external threats. In addition to implementing conventional audit measures, Ioan devised and deployed advanced techniques such as cyber-attack simulations; this methodology, which included the use of psychological strategies such as gamification.

Michelle Phillips

Global Data Protection & Privacy Senior Counsel, British American Tobacco, UK

Michelle joined British American Tobacco in August 2017 as Global Senior Counsel with the Group Business Conduct & Compliance team. With responsibility for data protection and e-privacy Michelle provides advice on all aspects of data governance with a particular focus on global IT digital solutions, international data transfers, and commercial transactions. Prior to joining BAT, Michelle spent 5 years at SAP as Senior Counsel within the commercial field legal team advising on high net worth IT transactions before moving into the SAP Group Data Protection Office. As a dual English and US (New York State) qualified lawyer, Michelle began her career as a litigator in private practice before moving into technology commercial roles at Novell and subsequently Symantec in 2009. Michelle holds data protection and privacy credentials which include CIPP/E, CIPP/US and is a Certified Data Protection Practitioner (PC.dp).

Kevin Shepherdson

CEO & Founder, Straits Interactive, Singapore

As the CEO and Founder of Straits Interactive Pte Ltd, Kevin provides and drives the vision, strategy and innovation of the company’s Data Privacy & GRC (Governance, Risk Management & Compliance) offerings that build upon the foundation of enabling trusted businesses and responsible marketing. He is the author of “99 Privacy Breaches to Beware of” and a well-qualified consultant and trainer, achieving the Fellow of Information Privacy (FIP), awarded by the International Association of Privacy Professionals (IAPP). In addition, he is a governance, risk management and compliance professional (GRCP) under the Open Compliance Ethics Group (OCEG) and an official OCEG trainer. With his background in privacy and GRC, Kevin is a leading speaker in this field. Having held Asia Pacific leadership and management positions in his 20+ years in the IT industry with Creative Technology, Sun Microsystems and Oracle Corporation, Kevin brings his experience to the area of governance and operational compliance. Kevin holds a MSc degree (Internet & Media) from Nanyang Technology University and Bachelor of Arts & Social Sciences from National University of Singapore. Besides being a member of the Singapore Institute of Directors (SID), he is also a certified Master Practitioner in NLP and Neuro-Semantics as well as a Certified Hypnotherapist.

Peter Singleton

Interim CPRD IG Manager, Clinical Practice Research Datalink (CPRD), MHRA, UK

Peter Singleton is Interim Information Governance Manager at the Clinical Practice Research Datalink (CPRD), a centre of the Medicines and Healthcare products Regulatory Agency (MHRA), an executive agency of the Department of Health and Social Care (DHSC) in the UK. CPRD is a real-world research service supporting retrospective and prospective public health and clinical studies. CPRD is jointly sponsored by the MHRA and the National Institute for Health Research (NIHR). CPRD collects de-identified patient data from a network of GP practices across the UK. Primary care data are linked to a range of other health related data to provide a longitudinal, representative UK population health dataset. The data encompass over 35 million patient lives, including 11 million currently registered patients. For more than 30 years, research using CPRD data and services has informed clinical guidance and best practice, resulting in over 2,200 peer-reviewed publications investigating drug safety, use of medicines, effectiveness of health policy, health care delivery and disease risk factors. Peter has worked on privacy policy issues in the UK for public and private sector organisations and in academic research projects across Europe for the last 20 years.

Linda Thielová

Privacy Counsel, OneTrust, UK

Linda Thielová serves as Privacy Counsel at OneTrust, the largest and most widely used dedicated privacy management technology platform for compliance with global privacy laws. In her role, Linda provides guidance on GDPR, ePrivacy and global privacy-related obligations to support product innovation and assist with compliance efforts for a wide spectrum of organizations from both private and public sectors. She also conducts training and workshops on the global privacy landscape and contributes to various publications and conferences on a regular basis. Linda's background combines judiciary review of administrative decisions and more hands-on experience of building internal company privacy programs from an in-house legal counsel position. Linda is a Certified Information privacy Professional (CIPP/E, CIPP/US, CIPM) and holds a master’s degree in Law and Legal Science.

Alvin Toh

Chief Marketing Officer / Head, International Operations, Straits Interactive, Singapore

As CMO and Head of International Operations of Straits Interactive, Alvin drives marketing strategy, awareness and partner relationships for the company’s innovative privacy solutions that build upon the foundation of responsible marketing. In addition to running the company’s marketing and international operations, Alvin is a sort after regional speaker on data protection and privacy management. With his extensive knowledge of regulatory requirements and his process driven outcome, Alvin is also involved in Straits Interactive’s data protection consulting and training engagements. Alvin is a veteran of the technology industry, first cutting his teeth as a Sales Director at Sun Microsystems and then as Regional Director at 3Com, where he managed a sales portfolio of more than $100 million in the highly competitive and regulated industries of Finance, Telecoms, Healthcare and Government. He holds an Executive MBA, International Business Administration, from Rutgers, The State University of New Jersey-New Brunswick and internationally recognised professional qualifications from International Association of Privacy Professionals, Open Compliance Ethics Group and EXIN. His credentials from these examining bodies include the Certified Information Privacy Manager and Technologist (CIPM and CIPT), the Certified Information Privacy Professional /Asia (CIPP /A) and the GRC Processional (GRCP) Certification.

Claus Ulmer

Group Data Privacy Officer, Deutsche Telekom AG, Germany

Ulmer studied law in Germany with practical studies in Haifa, Israel. The first years worked for a law firm in Germany focused on Corporate Law, M&A and Labor Law before he joined the debis Systemhaus GmbH, a DaimlerChrysler subsidiary as a legal advisor. Shortly after joining the debis Systemhaus Group it was merged with Deutsche Telekom subsidiaries and Ulmer took over the position as Head of the Data Protection/Privacy organization at T-Systems International Group. In July 2002 he was appointed the Group Data Privacy Officer with Deutsche Telekom Group and has been responsible since then for the worldwide Data Privacy strategy and governance of Deutsche Telekom Group. In 2007 the headquarter unit “Group Privacy” with over 60 Data Protection experts was formed which he is leading today. Ulmer has made many publications in national and international specialized press and published “The Data-Protection-Handbook Telecommunication”. He has been also speaker at several national and international conventions. Ulmer is lecturer for the Data Protection and IT-Security Academy in Ulm, Germany, which is a training institute for Data Protection and Privacy Officers. He is representing the German Industry Association in the advisory board of the Data Protection Foundation of the Federal Republic of Germany. Dr. Ulmer also supports startup companies and new visionary ideas in the digital area. E.g. he is member of the advisory board of Motionlogic, a company that provides traffic information in basis of anonymous call detail records. Dr. Ulmer has also supported governmental delegations of several states and companies with strategic and managerial advice for data privacy processes and management systems.

Esther Watt

Data Protection Officer, North Kesteven District Council, UK – ICO’s DPO of Year 2018

Esther started off her local government career in Democratic Services, which gave her an understanding of all the key components of the organisation. She then moved into a policy and partnership role, combined with scrutiny, at another local authority. This focused on production of policy papers, the management of policy projects, managing the Local Strategic Partnership and managing the organisation’s overview and scrutiny function. Following this, Esther joined North Kesteven District Council to focus on scrutiny, but this role expanded to include corporate performance, consultation and equality and diversity. A few years later, this post became the Corporate Information Manager role, with the added responsibilities of: access to information, data protection and records management. In 2018, Esther won the inaugural ICO practitioner Award for Excellence in Data Protection.

Josh Zweig

Civil Liberties Engineer, Palantir Technologies, USA

Joshua Zweig is a Civil Liberties Engineer at Palantir Technologies. He holds a degree in Computer Science from Columbia University. He has previously been involved in a number of startups and academic research efforts, primarily in cyber security and data analysis roles. He was also a part of the World Economic Forum’s Young Scientists Community in 2014.