Rachael Annear

Partner, Freshfields Bruckhaus Deringer, UK

Rachael is an experienced counsel specialising in laws concerning data, including the GDPR, with a particular interest in the financial services, retail and tech sectors. Taking advantage of her IP/IT and Information law background Rachael regularly advises clients on data matters and is experienced in assisting international organisations on complex data strategy. Rachael advises on the full range of data matters particularly in the context of multi-national deals, compliance, data crises, investigations and litigation. She helps clients on all aspects of GDPR compliance including complex questions concerning data transfers, disclosure to regulators, export and extra-territorial effect and assists clients facing ICO enforcement action. Rachael has spent time as a legal advisor to the Cabinet Office and has experience in multinational deals, data crises, litigation and legislative drafting.

Back to top

Rebecca Anselmetti

AI Regulation Senior Policy Adviser, Office for AI, UK

Rebecca Anselmetti is a Senior Policy Advisor in the Office for Artificial Intelligence, UK government, where she works on the implementation of the UK pro-innovation approach to AI regulation. Her work focuses on exploring the role of tools for trustworthy AI to support AI governance, regulation, and international interoperability. Prior to joining the Office for AI, she led the UK government's work on AI standards policy, where she was responsible for determining the role of technical standards in the UK’s AI regulation model, and launched the AI Standards Hub in October 2022 alongside the Alan Turing Institute. Rebecca is also representing the UK in international standards bodies and is a member of the OECD Network of Experts on AI.

Before her roles in the UK government, Rebecca worked as a consultant for Technology and Digital Risk at Deloitte UK. She holds an MPhil in Technology Policy from the University of Cambridge, and a First-class honours BA in Digital Culture from King's College London.

Back to top

Jon Bartley

Head of Data Advisory, RPC, UK

Jon has 25 years' experience as a data protection, commercial contracts and technology lawyer. He provides pragmatic and solution-focussed advice to household name clients from a range of sectors including retailer and consumer, social media and technology, insurance and professional services.

Jon leads the Data Advisory team, part of RPC's wider Data & Privacy group, including specialist Data Disputes and Data Breach teams. Jon advises on the full range of data protection and ePrivacy compliance issues, including multi-jurisdictional data protection audits, data transfers (including Transfer Risk Assessments), data protection impact assessments, data analytics and marketing, adtech compliance and drafting and negotiating contracts involving the processing or sharing of personal data.

Back to top

Dr Zofia Bednarz

Lecturer, University of Sydney Law School, Australia

Dr Zofia Bednarz, Lecturer at The University of Sydney Law School and Associate Investigator with the ARC Centre of Excellence for Automated Decision-Making and Society

Zofia is an academic at the University of Sydney, where she teaches and researches in the area of commercial and corporate law. Zofia's current research focuses on the use of new technologies, such as Artificial Intelligence (AI) tools, by financial firms and the implications it has for provision of financial services to consumers. She has published her research in leading international and Australian journals and has been interviewed by Australian national radio ABC and other media outlets.

Zofia has got a PhD in commercial law from the University of Malaga (Spain), and has qualified as a lawyer in Spain.

Back to top

Susan Bennett

Principal, Sibenco Legal & Advisory & Founder, InfoGovANZ, Australia

Susan’s focus is driving best practice holistic governance solutions aligning data, information, privacy and records with technology and regulatory compliance to achieve organisational goals. Recognised for her global thought leadership in information governance, Susan has deep commercial expertise on which she draws to work with cross-functional and multi-disciplinary teams to add value and deliver outcomes on major projects and objectives. Susan advises on information and data governance frameworks and policies, including cross-border data privacy and regulatory compliance, as well as acting in internal investigations and regulatory inquiries.

Susan holds a Master of Laws and a Master of Business Administration, and is a Certified Information Privacy Professional – Europe (CIPP/E). She is in the final stage of completing a PhD thesis on Privacy and Data Protection: the role of regulation and information governance. Susan is a Fellow of the Governance Institute of Australia (FGIA), a member of the Asian Privacy Scholars Network (APSN), and a member of the EDRM Global Advisory Board.

Back to top

Claudia Berg

General Counsel, ICO, UK

Claudia is the General Counsel for the Information Commissioner’s Office. She heads up the ICO’s Legal Service and provides strategic legal advice to the Commissioner, the ICO’s Executive Team and Management Board.

Claudia joined the ICO in April 2021 from the Competition & Markets Authority where she was responsible for the legal oversight of the CMA’s entire competition law enforcement portfolio, from the launch of an investigation through to decision and subsequent litigation before the Courts. Prior to the CMA, Claudia worked at Linklaters London, advising clients on all aspects of EU and UK competition law.

Claudia is a dual-qualified Solicitor in England & Wales and Germany. She holds a Maîtrise en droit from the University of Paris 1 (Panthéon-Sorbonne) and a Master’s degree from King’s College London.

Back to top

Ann Bevitt

Partner, Cooley, UK

Ann Bevitt has been advising clients on privacy and data security compliance for over 20 years. Ann covers all aspects of privacy regulation and risk management. She regularly works with clients on issues such as dealing with data subject requests, effecting data transfers, drafting privacy policies, handling breach notification, drafting and negotiating data processing agreements, identifying the legal bases for processing special category data, electronic marketing, rolling out new technologies in the workplace, monitoring employees in and outside of the workplace, employee background checks, dealing with e-discovery, undertaking internal investigations (domestic and cross-border), handling regulatory investigations, and responding to disclosure requests and subpoenas in litigation.

Ann works with clients across a very broad range of industry sectors including technology, biotechnology and pharmaceuticals, venture capital and private equity, insurance, media, hotel and leisure, retail, restaurant, music, banking and financial services, recruitment and employment.

Ann is a regular speaker at privacy and data protection conferences and writer for legal and trade publications, including the Financial Times, CityAM and Management Today. She is a contributing author to ‘Employee Privacy: Guide to US and International Law’ and ‘A Practical Guide to UK and EU Data Protection Law’.

Back to top

Max Bleyleben

Managing Director & Chief Privacy Officer, SuperAwesome, UK

At SuperAwesome, an Epic Games company, Max is responsible for compliance strategy in relation to the company's kidtech product portfolio, and for public policy initiatives to make the internet safer for kids. Max has 25 years’ experience as operator, adviser and investor in media and technology companies. He was previously COO of social TV platform Beamly. Prior to that he was a partner at growth equity firm Kennet Partners, leading investments in technology companies in the US and Europe. During the first Internet boom, Max advised software and Internet companies on mergers and acquisitions as an associate and principal at Broadview International, the leading independent boutique investment bank.

Back to top

Stephen Bonner

Deputy Commissioner, Executive Director, Regulatory Futures, Information Commissioner's Office, UK

Stephen Bonner is currently Deputy Commissioner, Executive Director, Regulatory Futures at the Information Commissioner's Office - Establishing the ICO’s stances on new technology applications and innovation initiatives involving data, and leading work to position the ICO effectively to regulate in the digital landscape.

Prior to this he spent nearly 10 years as Equity Partner at Deloitte LLP and KPMG LLP, in leadership roles in Cyber and Privacy Risk Services. Stephen's earlier career includes: Managing Director – Information Risk Management & Financial Change at Barclays PLC, establishing the IRM team globally.

Back to top

Nana Botchorichvili

Counsel, IDEA Avocats, France

Nana Botchorichvili is Counsel, specialized in data protection law, at IDEA Avocats. Her activities involve advising private and public organizations on a wide range of issues relating to personal data protection and privacy in France and globally. Before joining IDEA Avocats, Nana worked as part of Bird & Bird’s dedicated data protection and privacy team during 5 years, and then as legal officer within the CNIL’s European and International affairs department during 4 years, where she took part in the work of expert subgroups of the Article 29 Working Party and European Data Protection Board (EDPB) in particular on issues relating to international data transfers. Nana is a lecturer in data protection law at the University of Paris II Panthéon – Assas, as well as at Paris – Descartes University.

Back to top

Karishma Brahmbhatt

Counsel, Allen & Overy, UK

Karishma is a senior data and technology lawyer at Allen & Overy LLP, specialising in all aspects of data protection and privacy law. She has particular experience advising companies from a wide range of industries on data ethics matters, Artificial Intelligence, big data, social listening, cookies, profiling, adtech and IoT matters. She has written a number of articles on data privacy and digital issues, including on data ethics in a business environment and privacy in adtech, and is regularly invited to speak on key data-related developments. Karishma is Co-Chair of the SCL Privacy and Data Protection Group Committee and is named one of the ‘40 Under 40’ in Global Data Review’s 2021 rankings.

Back to top

Carole Cadwalladr

Journalist, The Observer, UK

 

Back to top

Peter Church

Counsel, Linklaters, UK

Peter’s practice encompasses a wide range of areas in which technology interfaces with the law including data privacy, ecommerce regulation and technology contracts. He has spent time on secondment at a number of global technology and communications companies. He is editor of Data Protected, a review of data protection laws across 52 jurisdictions around the world.

Back to top

James Clark

Partner, DLA Piper, UK

James Clark is a data protection, privacy and cyber security lawyer who is passionate about all areas of ‘data law’. He demystifies this complex area for his clients and prides himself on delivering thoughtful and practical advice.

James has worked on international projects his entire career and has spent time on secondment in the firm’s Brussels and Washington, D.C. offices. He has a particular focus on the life sciences, insurance and government sectors, and leads the firm’s privacy law practice for the life sciences sector.

Back to top

Clara Clark Nevola

Group Manager - Anonymisation & Encryption, ICO, UK

Clara leads the anonymization and encryption policy group within the ICO’s Technology Department. Her focus is on the interplay between UK data protection law and technology. Clara’s recent work at the ICO includes leading a citizen engagement project on the use of biometric technologies, analysing the data protection implications of dark patterns and co-producing guidance on privacy enhancing technologies.

Prior to joining the ICO, Clara worked as a data protection solicitor at an international law firm. She has also spent time as a secondee in the ICO's Policy Legal team and as the European legal counsel at a large pharmaceutical company.

Back to top

Edwin Concepcion

Country Head, The Philippines, Straits Interactive, The Philippines

Edwin is the Head of the Data Protection-as-a-Service unit. As an international trainer and consultant, he provides privacy and data protection training, consulting and advisory to various organizations which include retail and hospitality, publishing, education, telecommunications and others. He has more than 20 years of experience in the IT industry in various management roles from enterprise solutions, marketing and product management.

Edwin is also a much sought after speaker in the field of data governance and has shared his knowledge in this subject in many webinars and events.

Back to top

Rebecca Cousin

Partner, Slaughter and May, UK

Rebecca is a partner in Slaughter and May’s corporate and commercial group in London, co-heads the firm’s global data protection and privacy practice and is a member of our cyber advisory unit. She advises on all aspects of data protection and privacy, including cyber or data breach preparation and incident response, challenges with new technologies, implications for contractual arrangements, privacy aspects of M&A and investigations, and on companies’ policies and procedures. Rebecca sits on the UK Information Commissioner’s Office’s Legal Reference Panel and is Vice-Chair of the City of London Law Society's Data Law Committee. She is also a frequent contributor to data protection journals and events.

Back to top

Gail Crawford

Partner, Latham & Watkins, UK

Gail is a partner in the London office of Latham & Watkins and Global Chair of the Technology Transactions Practice. Her practice focuses primarily on data privacy and compliance with global information laws. Gail advises clients on complex cross-border data compliance and security matters, including complex subject access requests, significant data breach matters, and innovative data projects that seek to support and drive the business strategy of our clients. She has also been engaged significantly with the General Data Protection Regulation (GDPR) and its interpretation.

Gail is recognised by the legal directories as one of the leading data protection lawyers in the UK. She is described by Legal 500 UK 2020 as “outstanding in her ability to understand the problem, assess risk and provide appropriate guidance. She always makes herself available and has unrivalled command of the data-protection landscape”.

Back to top

Richard Cumbley

TMT Partner, Global Head of TMT/IP, Linklaters, UK

Richard is Global Head of Linklaters’ TMT practice and has advised clients on privacy related issues for more than 20 years. He has worked on privacy projects across the globe including major data security incidents, large scale privacy litigation, appearances before regulators, contentious and large scale subject access issues, the privacy implications of new technology, online monitoring techniques (including by governments), cloud computing and “big data”. He has recently led teams advising Thomson Reuters, BlackRock, RBS, Hewlett Packard, News International, Disney, Live Nation, UBS, KPMG, Hyatt Hotels, AstraZeneca, Sainsburys, Deloitte and the administrators of Lehmans on domestic and international data protection and information governance projects. He is a past member of the IAPP editorial board, currently sits on Tech UK’s data advisory group and is a member of the ICC’s digital economy committee. He is listed by Chambers and Partners and Legal 500 as in the first rank of privacy and cybersecurity advisors in the UK.

Back to top

Dai Davis

Solicitor, Percy Crow Davis & Co, UK

Dai Davis is a solicitor, Chartered Engineer and Member of the Institution of Engineering and Technology. He has masters degrees in both Physics and Computer Science. Having been national head of Intellectual Property Law and later national head of Information Technology law at Eversheds (now Eversheds Sutherland) for a number of years, Dai is now the principal in his own law practice, Percy Crow Davis & Co Ltd.

In the last twenty years he has also built a practice advising many clients who specialise in software safety, cyber security and privacy. He has lectured and written widely on these subjects. He is an elected trustee of the UK Cyber Security Council.

Dai is also a non-executive director of FAST (The Federation Against Software Theft) and a Liveryman of the City of London through the WCIT (Worshipful Company of Information Technologists). He has chaired an International Standards legal advisory committee on Dependability (an adjunct to IEC TC 56) for over a decade and is a recipient of the International Electrotechnical Commission’s 1906 award. He is honorary solicitor to the Safety Critical Software Club.

Back to top

Alison Deighton

Director, HelloDPO, UK

Alison is one of the co-founders of HelloDPO Law and is a trusted privacy adviser. Alison guides clients through complex privacy problems finding practical solutions that meet business and compliance needs. Alison has particular expertise advising on overseas transfers of data, including advising on EU and UK BCR applications. Alison also supports businesses with managing significant data breaches, making regulatory reports and advising on remediation actions. She also regularly advises on contractual matters, negotiating and drafting data processing agreements for both controllers and processors. On the compliance side, Alison helps clients to design and implement privacy governance programmes and provides mentoring to DPOs and others starting their privacy careers.

Alison is a member of the IAPP and holds the CIPP/E certification.

Back to top

Alexander Dittel

Technology Partner, Wedlake Bell, UK

Alex is a data protection expert and commercial lawyer with significant in-house and private practice experience who also acts as Data Protection Officer for numerous clients. He advises on compliance, transactional, regulatory and dispute maters with domestic and international elements. Working at a start-up, Google and top technology law firms in the City in the past, he has developed a pragmatic problem solving style appreciated by his clients. Alex is a regular contributor to Privacy Laws & Business and PLC Magazine and the editor of the firm's data protection podcast.

Back to top

Kieran Donovan

Partner, Latham & Watkins, Hong Kong

Kieran Donovan is a partner in Latham & Watkins' Hong Kong office and leads the firm's Data & Technology Transactions Practice in Asia. Named as Data Privacy Lawyer of the Year in 2021 and 2023 by the Asia Legal Awards, he is experienced in advising clients across various industries with data privacy and cybersecurity issues.

Kieran also advises clients on complex cross-border commercial, outsourcing, technology, media, and fintech matters.He has a wide range of expertise advising clients from various sectors, but his principal focus has been on the financial services, internet, gaming, technology, and entertainment industries. Alongside a broad specialism in technology and commercial matters, Kieran also advises clients on fintech projects, with expertise advising on joint ventures, collaboration arrangements, and privacy compliance, in connection with the development of disruptive technologies in the financial services and payments space.

Back to top

Bertrand du Marais

Commissioner for International Affairs, CNIL, France

Bertrand du Marais is a graduate of ESSEC Graduate School of Management and an alumni of the National Administration School (“Ecole Nationale d’Administration”, “Liberté Egalité Fraternité 1989” graduating class).

Having held the positions of “auditeur” and then of “maître des requêtes” at the French Council of State (“Conseil d’Etat”), he has been State Counselor (“Conseiller d’Etat”), since 2006. He has been a member of the CNIL’s college of commissioners since 2019, responsible for online platforms, co-regulation, Europe and International affairs.

In parallel to his career at the French Council of State, within French and international administrations, he is the author of articles and books relating to public utility law, market regulation law as well as information and communication technologies, and more generally on interactions between Law and Economics including a textbook “Public Law of economic regulation”(Paris, Presses de Sciences-Po et Dalloz, 2004), which has been awarded the Charles Dupin Prize by the French Academy of Social and Political Sciences (Académie des sciences morales et politiques).

Back to top

Andrew Dyson

Partner, DLA Piper, UK

Andrew Dyson advises clients on data privacy, cyber security, IT and e-commerce matters. He brings over 20 years experience advising on the legal and ethical risks arising from the collection and use of data and deployment of new technologies.

His clients operate principally in financial services, health, consumer and technology sectors, where data driven solutions are increasingly critical to securing effective operational outcomes. He also advises the key public sector bodies that are responsible for data privacy and cyber risk management within the UK.

Back to top

Simon Elliott

Partner, Dentons, UK

Simon specialises in advising multi-national corporates on a wide range of data protection and technology law issues. He has over ten years experience with Dentons' tier one ranked data privacy practice advising clients on data privacy and information governance matters, including global data transfer solutions, data processor engagement, marketing and CRM strategies and data incident responses. He regularly advises clients on compliance with the General Data Protection Regulation, leading multiple audit and gap assessments exercises and implementation projects. He has also advised on multiple Binding Corporate Rules applications – both for data controllers and data processors – and Privacy Shield applications. His clients span the financial services, technology, media, retail and transport sectors. Simon was identified as a "Next Generation Lawyer" by Legal 500 for data protection, privacy and cybersecurity and recognised by Global Data Review as one of its "40 under 40" data lawyers. He has also previously sat on the Executive Committee of the Data Protection Forum and regularly speaks on data protection topics. He also regularly advises clients on complex commercial and technology contracts, including vendor procurement, outsourcing and commercial partnership arrangements. Simon has previously been seconded to clients in the manufacturing and financial services sector.

Back to top

Nane Engelhart

Senior Legal Counsel, Product, Data & IP, EVBox, Netherlands

Nane Engelhart is EVBox’s Senior Legal Counsel, Product, Data & IP. Since joining EVBox in 2022, she supports the teams that develop and promote EV charging solutions to help power a more sustainable future. Nane has over 10 years of experience working at European technology companies in various legal roles. She graduated in European and International Commercial law and is a qualified Solicitor.

Back to top

Professor David Erdos

Professor of Law and Open Society, WYNG Fellow in Law, University of Cambridge, UK

Dr David Erdos is Professor of Law and the Open Society and Deputy Director of the Centre for Intellectual Property and Information Law in the Faculty of Law at Cambridge. He is also WYNG Fellow in Law at Trinity Hall. David's current research focuses on data protection especially as it interacts with freedom of expression and freedom of the arts and sciences. Drawing on his background in both law and political science, much of his work has engaged in systematic comparative analysis of different legal jurisdictions blending qualitative, quantitative and doctrinal analysis.

Back to top

Marcus Evans

Partner, Norton Rose Fulbright, UK

Marcus Evans is data protection, privacy and cybersecurity lawyer based in London. As a partner in the communications media and technology team, Marcus leads our European Data Protection, Privacy and Cyber Security Group and is a member of our International Outsourcing Group.

Marcus has experience of all aspects of data protection, IT and business process outsourcing transactions. He regularly coordinates multijurisdictional data privacy projects covering all aspects of data privacy compliance. He has negotiated a number of large offshore and multijurisdictional outsourcing deals, and also advises on disputes and re-negotiations in the sector for multinational customers, public sector bodies and industry suppliers. He also advises on software licensing, e-commerce, apps, freedom of information and trade mark licensing, and IT issues in M&A transactions.

Marcus has been recognized as a leading UK data privacy practitioner in Chambers & Partners consecutively from 2014 to 2021.

Back to top

Ekaterina Gribkova

Compliance Counsel, EVBox, Netherlands

Katia Gribkova is EVBox’s Compliance Counsel, leading the privacy and compliance team. She focuses on building a culture of ethics and compliance as the key to the company’s sustainable development and strong reputation. Before joining EVBox in 2021, Katia had 10 years of experience in different legal roles, including in a manufacturing company and a tech startup. She holds LL.M in Law and Technology and is a certified compliance and ethics professional (CCEP-I).

Back to top

Laura Handford

Senior Counsel, Digital and Data Protection, Aviva, UK

 

Back to top

Katie Hewson

Partner, Stephenson Harwood, UK

Katie Hewson leads Stephenson Harwood’s data protection practice. She was awarded "Privacy Leader of the Year: Legal" at the PICCASO Privacy Awards in December 2022 and is recognised as a Next Generation Partner for data protection, privacy and cyber security by The Legal 500 UK 2023, in which she is described as “a valued advisor in relation to EU and UK GDPR matters”. She is also ranked as an 'Up and Coming' lawyer for data protection and information law in Chambers UK 2023, which states she "has excellent technical knowledge and provides clear, practical advice".

Katie regularly advises clients across a variety of industries on the privacy implications of digital transformation projects and emerging and innovative technologies, including AI, apps, employee monitoring, bring your own device, biometrics and facial recognition and profiling. She has extensive experience leading international GDPR compliance projects and advises on data protection contracts, transparency issues, international personal data transfers, data sharing, cyber security and personal data breaches. Katie also advises a variety of clients on direct marketing, ad tech, social media and cookies issues under the e-privacy regime.

Katie has acted for clients facing ICO enforcement action on potential data protection and freedom of information law breaches, winning successful outcomes for her clients in relation to subject access requests, breach reporting and FOIA requests.

Back to top

Jane Hunt

Senior Privacy Counsel, Clear Channel International, UK

Jane is Privacy Counsel at Clear Channel International, one of the world’s leading out-of-home advertising companies. She provides strategic legal and privacy advice across Clear Channel’s European and Latin American Business Units. This includes managing the ethical and privacy issues in the digital out-of-home advertising services, advising on the implications of emerging technologies in AdTech and analytics, and understanding the complex data sharing arrangements behind these technologies. She advises on key risks and issues and how these can be managed using the principles of privacy and security by design and by default to align with the business strategy.

Jane joined Clear Channel in November 2022. She previously worked in-house for a travel technology company, based in Madrid, where she had advised on privacy and data protection matters. Jane is qualified as a solicitor in England and Wales and has more than 20 years in-house and private practice experience both in the UK and Spain.

Back to top

Seán Hurley

Decisions and Corrective Powers, Legal Unit, Data Protection Commission, Ireland

Seán is an Assistant Commissioner and a Senior Regulatory Lawyer in the Inquiries and Investigations Unit of the Data Protection Commission. He acts as a legal advisor to the Commissioner in relation to large scale cross-border and domestic inquiries. He regularly engages in speaking events on behalf of the DPC.

Seán is a practising Barrister-at-Law and is a graduate of University College Dublin (BCL) and UCL (LLM International Commercial Law). He has previously lectured in Company Law at UCD and has acted as a legal representative at the Free Representation Unit in London.

Back to top

Asélle Ibraimova

Counsel, Reed Smith, UK

With experience working as in-house counsel in the tech and media industries before joining Reed Smith, Aselle understands how businesses operate and the demands placed on in-house lawyers. Her focus is on providing practical, commercial advice that enables businesses to thrive.

Aselle advises on data transfer solutions, representing both data controllers and processors, data breach and cybersecurity incident responses, and data commercialization and product launches. She also advises on technology transactions and complex outsourcing arrangements.

Aselle is a member of On-Chain: Reed Smith’s Crypto & Digital Assets Group and has advised clients on data issues as they relate to cryptocurrencies and digital assets.

Representing multinational corporations in UK and EU data protection matters and in developing data protection and e-privacy compliance programs, Aselle’s clients span the retail, e-commerce, health care, financial services, defense, online social gaming, and adtech industries.

Back to top

Josephine Jay

Senior Associate, Goodwin, UK

Josephine Jay is based in Goodwin’s London office and is an associate in the firm’s Data, Privacy & Cybersecurity practice. She has considerable experience advising on a wide range of privacy compliance matters for clients at all stages of their development and across numerous sectors, including technology, life sciences, media and entertainment, funds and financial services. Josephine has advised on all aspects of European data protection law, including international data transfers, online advertising strategies, cookies, use of sensitive and vulnerable data subject data, data sharing arrangements, internal and external policy creation and oversight, training and education programs, privacy-related certifications, and overseeing security incidents and breach notification procedures. Josephine has extensive in-house experience. Most recently, she served as a European data protection officer at a web and mobile gaming company, where she implemented and managed its GDPR compliance program and advised on other privacy matters, including data protection considerations around strategic acquisitions.

Back to top

Jonathan Kirsop

Partner, Pinsent Masons, UK

Jonathan is a data protection and technology specialist whose clients range from international banks to asset managers and pension funds as well as clients in other sectors, such as technology, leisure and travel. He has spent time on secondment at regulators and global financial institutions and led numerous international privacy projects across multiple jurisdictions and in different sectors. Jonathan is a founding member of the City of London Law Society Data Committee which helps to shape industry practice in response to government and regulatory consultations. He has also participated in the working group developing the London Data Charter, a framework for effective data sharing between private, public and third sector organisations. Legal 500 describes Jonathan as an "understatedly solid expert in the area of data protection law – consistently delivering practical and commercial advice, at pace."

Back to top

Tatiana Kruse

Of Counsel, Dentons, UK

Tatiana is legacy head of the Intellectual Property and Technology and Communications practices and is now Of Counsel in the Firm's London office, having retired from the partnership.

She has decades of experience advising on commercial contracts, in particular, involving technology and intellectual property. She has advised on all the main types of transactions involving software, outsourcing and the protection and exploitation of trade marks, copyright, database rights and other intellectual property.

She also has particular expertise in data protection, including compliance and trouble-shooting. She leads the Dentons Privacy Community, a forum for privacy practitioners from Dentons and its clients, which meets periodically to exchange views on privacy issues in a safe and open way. She also organises bi-weekly update sessions for Dentons' privacy lawyers in the UK and Europe.

Back to top

Lore Leitner

Partner, Goodwin, UK

Lore Leitner is a partner in Goodwin’s Data, Privacy & Cybersecurity practice. Her practice focuses on data protection, privacy and cybersecurity in Europe, the UK and the rest of the world. With over a decade of experience, she assists clients with the design and implementation of strategic global data protection compliance programs, including those driven by the GDPR, and has advised companies on data privacy in the context of business strategies that involve large-scale data use, regulatory investigations, and mitigation of cyber intrusions or data breaches. She also has substantial expertise in M&A and capital markets transactions, assisting deal teams by advising on privacy, data protection, and other deal-related requirements.

Back to top

Dr Orla Lynskey

Associate Professor, LSE Law School, UK, and Visiting Professor, College of Europe, Belgium

Orla Lynskey is an Associate Professor, having joined the LSE Law School in 2012 and a Visiting Professor at the College of Europe. She teaches and conducts research in the areas of data protection, technology regulation, digital rights and EU law. She holds an LLB (Law and French) from Trinity College Dublin, an LLM in EU Law from the College of Europe (Bruges) and a PhD from the University of Cambridge. Prior to completing her doctorate, she worked as an academic assistant at the College of Europe (Bruges) and in public and private competition law practice in Brussels. She is an editor of International Data Privacy Law (OUP) and a Modern Law Review editorial committee member. She is currently a member of the Ada Lovelace Institute's "Rethinking Data" working group.

Back to top

Timothy Ma

Head of International Privacy and Data Protection, Tencent, Hong Kong

Timothy is currently serving as the Head of International Privacy and Data Protection Department of Tencent. He is also serving as the Data Protection Officer of the Tencent Group. Combining Timothy’s in-depth knowledge of regulations and best practices, and his understanding of enabling businesses to use privacy as a tool to gain trust from users and business partners, Timothy has assisted Tencent to design and implement a robust privacy compliance program and put Privacy by Design and Privacy by Default into actual practice.

Timothy is a practising solicitor in Hong Kong and qualified in the State of New York. He is CIPP/E and CIPM certified. Prior to joining Tencent in 2012, Timothy worked at a number of U.S. law firms in Hong Kong.

Back to top

Edward Machin

Associate, Ropes & Gray, UK

Edward Machin is an associate in the data, privacy and cybersecurity group, based in London. He provides clear and business-focused advice on a wide range of legal and regulatory issues in the rapidly evolving areas of privacy, data protection and security, e-commerce and marketing, and information law. Secondments at data-rich businesses in the life sciences and market research sectors have given Edward a deep understanding of what clients want – and these experiences inform his approach to providing practical legal and commercial solutions to organisations across Europe, the U.S. and Asia.

Back to top

Fiona Maclean

Partner, Latham & Watkins, UK

Fiona Maclean is a Partner in the London office of Latham & Watkins. Ms. Maclean brings a unique cross-section of knowledge and experience spanning data, technology, and commercial contracts to help clients navigate complex, multi-jurisdictional transactions within the broader framework of data privacy laws. She leverages her understanding of the innovative technologies to advise clients ranging from start-ups to technology giants and leading financial institutions. Her work at the nexus of the commercial and data worlds includes advising on operational resiliency risks and regulatory requirements including some of the most transformational cloud deals in the global market.

Ms Maclean has been recognised by the Legal 500 as a Next Generation Partner for IT and Telecoms, and described as “a name to note for cloud, outsourcing and data privacy” in the Legal 500 Fintech 2021 guide. She was previously named a 2020 Rising Star by Law360 and listed by The Lawyer in the 2019 Hot 100 List as a “pioneering technology lawyer” sitting at the nexus of data and regulation, “designing new corporate trajectories in transformational fintech, cloud, and innovation deals”.

Back to top

Tina Maisonneuve

Chief Privacy Officer, Nokia, UK

Tina is Nokia’s Chief Privacy Officer based in London and responsible for guiding Nokia’s global privacy strategy and managing privacy compliance across all of Nokia’s business groups and functions and operations in over 120 countries.

Tina is experienced in building, implementing, and successfully managing global privacy programs at major multinational companies to support business strategy while ensuring privacy protections and safeguards are in place.

Tina leads a team of specialists that work to drive necessary changes to the global privacy program, and adapt it for new business strategies, technological change and evolving privacy and security laws.

Managing complex privacy challenges, keeping up with digital business models and cutting-edge ethical and privacy issues from analytics to adtech, designing data breach response plans to protect against cyber incidents, overseeing strategic deals and contracts and advising executive management on key risks and issues is a valuable part her role.

Back to top

Hannah Mayer

Senior Counsel, Office of Privacy and Civil Liberties, U.S. Department of Justice, USA

Hannah Mayer is a Senior Counsel for OPCL. She entered the Department of Justice in 2016 as an Attorney General’s Honors Attorney. OPCL is responsible for protecting the privacy and civil liberties of individuals through review, oversight, and coordination of the Department’s privacy program, and for advising Department leadership on the privacy implications of legislative and regulatory proposals. At OPCL, Ms. Mayer supports the duties and responsibilities of the Department’s Chief Privacy and Civil Liberties Officer, provides legal advice and guidance to the Department and eight of its components on privacy and civil liberties issues, including the Drug Enforcement Administration and Civil Division, advises on DOJ’s international efforts on data privacy and bilateral/multilateral international agreements, and represents OPCL in the Department’s Insider Threat and UAS/CUAS working groups. Ms. Mayer received her Juris Doctorate from American University, Washington College of Law in Washington, DC. She also received her Master of Arts in international affairs from American University, School of International Service. Her undergraduate degree is a Bachelor of Arts in political science, international relations emphasis, with a minor in history from the University of California, Santa Barbara. She is a Certified Information Privacy Professional-Government (CIPP/G).

Back to top

Michael McEvoy

Information and Privacy Commissioner for British Columbia, Canada

Michael McEvoy was appointed to a six-year term as BC’s Information and Privacy Commissioner by unanimous motion of the Legislative Assembly in 2018. Immediately prior to his appointment he helped lead the Information Commissioner’s Office of the United Kingdom’s investigation into Cambridge Analytica and Facebook.

Since his appointment, Commissioner McEvoy has led a series of investigations aimed at strengthening access to information and protection of privacy, ranging from a ground-breaking report on how BC’s political parties collect and use the personal information of BC voters to an examination of the massive health data breach by LifeLabs.

Commissioner McEvoy is recognized as a national and international leader in the privacy authority community. With the global flow of trade and data requiring privacy regulators to closely cooperate, Commissioner McEvoy chairs the governing committee of the Asia Pacific Privacy Authorities (APPA), which brings privacy and data protection regulators together across the Asia Pacific region.

Commissioner McEvoy joined the OIPC in 2007 and was appointed Deputy Commissioner in 2013. He earned a Juris Doctorate from the University of Manitoba in 1985 and a Bachelor of Arts in 1980 from the University of Winnipeg. He has been a member of the Law Society of British Columbia since 1986 and is married with two daughters.

Back to top

Allan Millington

Global Data Policy Leader, EY, UK

 

Back to top

Andrew Mills

Legal Director UK&I, Experian, UK

Andrew Mills is the Legal Director for the UK and Ireland businesses of Experian, the global data company listed on the London stock exchange. He has been working for Experian since 2007.

Although very definitely a lawyer (he is admitted in both England & Wales and Ireland and is also a non-practising notary public), Andrew began his career in the world of electronic engineering with Marconi and often brings a different perspective.

His in-house legal team provides support to Experian on a wide range of matters, including data protection, regulatory & competition issues, dispute resolution and leading on global brand protection for the group. In keeping with his background, Andrew is driving transformation in the legal function with a focus on using data, technology and agile methodologies.

Back to top

Karolina Mojzesowicz

Deputy Head - Data Protection Unit, European Commission

Karolina Mojzesowicz is the Deputy Head of Unit of the unit responsible for data protection at the European Commission (DG Justice and Consumers). She was one of the Commission's representatives in the interinstitutional negotiations with Parliament and Council on the General data Protection Regulation (GDPR). She is now responsible for its implementation in the EU. Mrs Mojzesowicz previously served as a member of the European Commission's Legal Service, focusing on EU Competition law and International Trade law. In that capacity, she represented the Commission in numerous cases before the European Courts and before the WTO panels and Appellate Body. Mrs Mojzesowicz studied law in Poland, the Netherlands and Germany where she obtained her PhD in 2001.

Back to top

Andras Molnar

Policy Analyst, OECD, France

Andras Molnar is a Policy Analyst at the Organisation for Economic Co-operation and Development (OECD). At the OECD, Andras focuses on the digital economy and provides evidence-based policy analysis and guidance to the governments of member countries on data governance, privacy, online safety, children in the digital environment, and cybersecurity.

Andras publishes extensively and his contributions in the area of the digital economy were recognised internationally, including at G7 and G20 leaders’ summits. He authored and co-authored several books and articles, including a Digital Economy Outlook, numerous Digital Economy Papers, and Digital Policy Briefs. He also played a leading role in launching the Global Forum events on Digital Security for Prosperity which has become one of the most influential multilateral settings on cybersecurity.

Prior to his career at the OECD, Andras worked at the United States Congress, the United Nations and the European Parliament.

Back to top

Simon Morrissey

Legal Director BBC Information Rights and TVL, BBC, UK

Simon leads the Information Rights legal team at the BBC. He has been in this role for the last four years and was previously a privacy Partner in private practice at two London based international law firms spanning a period of ten years.

Prior to qualifying as a solicitor Simon worked in the national newspaper industry as an electronic engineer. Like many privacy lawyers, Simon initially specialised in commercial technology work and as far back as the mid-90s was advising the embryonic UK website development service sector and its clients on technology and privacy matters.

Although Simon advises on all aspects of data protection, e-privacy and freedom of information law, he has a particular expertise in advertising privacy, the personalisation of content and privacy issues affecting the creative and consumer sectors.

Back to top

Jenai Nissim

Director, HelloDPO, UK

Jenai is one of the co-founders of HelloDPO Law. Jenai has extensive experience advising organisations on global privacy requirements including the EU and UK GDPR, negotiating multi-national data transfer agreements under the new data transfer regime, handling breach investigations, undertaking data protection audits, and providing data protection training. Jenai also has significant experience advising organisations on data privacy compliance matters having successful set-up and embedded global privacy programmes for start-ups and global organisations.

Jenai is a member of the IAPP and holds the CIPP/E and CIPM certification. She also holds the PDP Practitioners Certificate in Data Protection and the ICA Certificate in Compliance.

Back to top

Ralph O'Brien

Principal, REINBO Consulting, UK

After two decades of work at the forefront of the privacy sector, Ralph has built his career around making the intricacies of Privacy & Security risk management understandable. He enjoys passing on his passion for privacy by translating often complicated legal concepts, into sustainable business processes.

Ralph provide the services of an experienced consultant, speaker, trainer, auditor, negotiator and project manager. He uses his knowledge of data protection laws and information governance standards to help businesses develop and grow, engage their stakeholders, and to deliver real value to clients.

Back to top

John O'Brien

Head of Legal, Data Protection, Revolut, UK

John leads Revolut's data protection legal team. Revolut is a global financial super-app with the stated ambition of being the world's first truly global bank. It currently has more than 25 million customers worldwide. John helps lead Revolut's privacy-by-design programme, regularly interacts with data protection regulators globally and works closely with key senior business stakeholders across a range of privacy and data protection issues.

Back to top

Mairead O’Reilly

Head of Legal Service (Legal Policy & Advice), ICO, UK

Mairead is the Head of the Legal Policy and Advice team at the ICO, where she provides strategic legal advice across the ICO’s domestic and international work. Mairead oversees legal support to a number of the ICO’s work areas including its regulatory sandbox, preparation for the Online Safety Bill (and seeking to promote regulatory coherence between data protection law and the new online safety regime) and analysis of the data protection implications of emerging technologies. Mairead joined the ICO in June 2021 from law firm Bates Wells, where she was a senior lawyer in the firm’s Data Privacy Practice. While in practice, Mairead supported a range of commercial, public and third sector organisations with their data protection compliance, advising on subject access requests, complex data sharing arrangements and direct marketing practices. Mairead has held trustee and advisory roles at a number of charitable organisations and is currently a trustee at the Greenwich and Bexley Community Hospice.

Back to top

Johanna Pezechkian

Privacy Division Officer, DPO Services, Federal Public Service Finance, Belgium

With 15 years experience in the field of data protection, I currently work within the Department of Information Security and Privacy Protection of the Federal Public Service Finance-Belgium. As head of the Privacy Division of this department, I am in charge of the GDPR compliance of data transfers between the FPS Finance and others public authorities or private organisations and I assist the Data Protection Officer in the execution of his missions. I was actively involved in the GDPR’s implementation within FPS Finance. I described this work in the article “GDPR’s implementation within Federal Public Service Finance-Belgium” (Privacy Laws & Business, June 19th 2020). Previously, I worked 7 years at the Chancellery of the Prime Minister as a Researcher at the Study Commission on Jewish Assets and then as Advisor at the Jewish Community Indemnification Commission. I hold a MA in art history from the Université Libre de Bruxelles and a PG in management from the Solvay Brussels School of Economics and Management. I studied one year at the University of Edinburgh as part of an exchange program.

Back to top

Teodora Pimpireva Tapping

Head of Privacy, Bumble, UK

Teodora is an accomplished privacy lawyer with almost 15 years of experience in the field and is currently the Global Head of Privacy at Bumble Inc. Her previous in-house privacy role at Mastercard as well as at Cognizant, Facebook and prior to that Google have provided her with extensive privacy experience in the financial and tech sector. To diversify her tech and in-house background, Teodora had spent a few years in private practice at PwC, advising clients in various industries on privacy matters. Her passion for privacy issues and technology is unwavering and she embraces the challenges it poses. Teodora's north star is the principle of "privacy by design". Her strong legal background and visionary yet pragmatic approach to solving complex problems strive to ensure that privacy is at the forefront of decision-making.

Back to top

Giles Pratt

Partner, Freshfields, UK

Giles heads the IP and technology group at Freshfields and leads its London data practice. He advises on the full range of legal issues relating to data and cyber security, including navigating data issues in M&A, data governance, crisis management and IP rights in data. Giles is a regular adviser on international data privacy breaches and investigations, and frequently speaks on data issues, including at Privacy Law & Business’ annual conferences and at various tech conferences. He is a member of the City of London Law Society Data Law Committee and edits the Global Data Review Handbook.

Back to top

Barry Proudfoot

Legal Counsel, Data Privacy, UK

Barry has been engaged in a wide variety of work over a number of years, from private practice to public service-in the form of the CPS , the FSA and finally the Foreign Office- and then in house at three global PLCs. His work has stretched from Land Law to Enforcement to Commercial and Compliance to Information Law, including Data Privacy. His reach has been global, and has included work in South and North America, Asia, Africa, Oceania and of course, Europe. He has been a Data Protection Officer in Singapore as well as in Europe, and an Investigator world wide. He holds two Masters, the most recent of which is in intellectual Property. Barry is also a Judge in the Valuation Tribunal for England.

Back to top

Bekah Putz

Associate General Counsel, Privacy & Security, Chegg, UK

Bekah is a privacy & cybersecurity attorney who has been in house counsel for national and international brands for over a decade, for products as diverse as ice cream and retail technology. She serves best as a translation layer between law and tech, and is most at home translating between her GC and her CISO. She is a Fellow of Information Privacy with IAPP and spends a great deal of her time running to keep up with the ever-changing privacy landscape of the US, as well as tracking major developments across the world sphere of cybersecurity.

Back to top

Sam Roberts

Team Lead, International Data Flows, Assessments, Tools and Mechanisms, Department of Science, Innovation and Technology, UK

Sam Roberts is a senior official at the newly formed UK Department for Science, Innovation and Technology, where he leads a team focusing on international data transfers, including the establishment of data bridges and exploration of alternative transfer tools to reduce friction for businesses moving data between countries and regions. His portfolio also includes working with UK regulators and external departments/agencies to develop consistent cross-cutting approaches to country and region assessments.

Over a decade-long public sector career Sam has worked in AI, open data, government accountability and ethics, representing the UK at multiple OECD forums, including the Working Party on Open Government, and Working Party on AI Governance. Sam also chaired the multilateral Digital Nations Data360 group for two successive cycles, presiding over the development of the Data360 declaration and Covid-19 Data Manual.

Back to top

Bethany Rugen

Senior Legal Counsel, HSBC, UK

Bethany is Head of Data Privacy and Regulatory Law at a captive Fintech within HSBC. She specialises in providing pragmatic advice to the business on key privacy programme issues. She was previously a senior legal counsel in the data privacy team at HSBC providing advice on adtech, biometrics, big data, cookies, cyber and international transfers.

Back to top

Sabrina Salhi

Head of Privacy and EU & UK DPO, Marsh McLennan, UK

Sabrina is the Head of Privacy and DPO (EU & UK) at Marsh McLennan. She is responsible for overseeing the development, implementation and ongoing maintenance of the MMC data protection compliance programme to meet complex and evolving regulatory and legal requirements.

Prior to this role, Sabrina worked as a Privacy & Cybersecurity Associate at Hogan Lovells, where she also trained and qualified as a lawyer. As part of her role, she advised multinational organisations from a variety of sectors including financial services, retail and technology on complex matters regarding data protection compliance and on personal data breach response.

Back to top

Luis Ricardo Sánchez Hernández

General Director of Regulations and Consultations, National Institute of Transparency, Access to Information, and Personal Data Protection, Mexico

Luis Ricardo has a Masters degree in Information and Communication Technology Law with specialized studies in digital data protection from INFOTEC of Conacyt, and a law degree from the UAEMéx Law School.

He is a Professor in the Master's Degree in Information and Communication Technology Law at INFOTEC, as well as bachelor's and master's degrees at other universities.

Luis Ricardo serves as General Director of Regulations and Consultation of the INAI Personal Data Protection Secretariat, he has participated in various international groups and initiatives; previously worked as Director of Private Sector Facilitation.

He was Head of the Planning and Transparency Unit of the Executive Secretariat of the Anti-Corruption System of the State of Mexico; Director of Personal Data Protection at Infoem; Head of the OSFEM Litigation Department, acting as lead auditor of the Quality Management System.

Back to top

Benjamin Shepherdson

Country Head, Malaysia, Indonesia and Islamic countries, Straits Interactive, Malaysia

As Country Manager of Straits Interactive Malaysia, Benjamin drives the overall operations and privacy solutions in line with the directions of the company’s channel and strategy that build upon the foundation of enabling trusted businesses and responsible marketing. In addition to that, he also covers Asia Pacific regional sales and support for Straits Interactive Pte Ltd.

Back to top

Kevin Shepherdson

CEO, Straits Interactive, Singapore

As the CEO and Founder of Straits Interactive Pte Ltd, Kevin provides and drives the vision, strategy and innovation of the company’s Data Privacy & GRC (Governance, Risk Management & Compliance) offerings that build upon the foundation of enabling trusted businesses and responsible marketing. He is the author of “99 Privacy Breaches to Beware of” and a well-qualified consultant and trainer, achieving the Fellow of Information Privacy (FIP), awarded by the International Association of Privacy Professionals (IAPP). In addition, he is a governance, risk management and compliance professional (GRCP) under the Open Compliance Ethics Group (OCEG) and an official OCEG trainer. With his background in privacy and GRC, Kevin is a leading speaker in this field. Having held Asia Pacific leadership and management positions in his 20+ years in the IT industry with Creative Technology, Sun Microsystems and Oracle Corporation, Kevin brings his experience to the area of governance and operational compliance. Kevin holds a MSc degree (Internet & Media) from Nanyang Technology University and Bachelor of Arts & Social Sciences from National University of Singapore. Besides being a member of the Singapore Institute of Directors (SID), he is also a certified Master Practitioner in NLP and Neuro-Semantics as well as a Certified Hypnotherapist.

Back to top

Karen Silverman

CEO and Founder, The Cantellus Group, USA

Karen is a leading global expert in practical governance strategies for AI and other frontier technologies. She is the CEO and founder of the Cantellus Group, which advises clients ranging from Fortune 50 companies to startups, business consortia and the public sector on how to effectively realize the opportunities and manage the risks of cutting-edge technologies in a rapidly changing policy and security environment. Karen is the SME for the Business Roundtable’s Responsible AI Initiative and a World Economic Forum Global Innovator. She sits on WEF's Global AI Council and has participated in several WEF projects, including the Board Toolkit on AI and framework for Digital Trust. She is a frequent speaker and author on technology governance and digital coherence issues. Prior to founding the Cantellus Group, Karen was a partner at Latham & Watkins, LLP and a globally recognized competition lawyer and advisor to boards and management.

Back to top

Elisabeth Stafford

Data Protection Reform, Department of Science, Innovation and Technology, UK

Elisabeth Stafford has led the negotiating team for the UK in the reform of the ePrivacy Directive and the recast of Regulation 45/2001, setting data protection rules for the EU institutions. Previously, she was one of the negotiators on the GDPR and the Law Enforcement Directive for both the UK, and for the European Commission. She has also worked in private office in the Ministry of Justice, leading on human rights and EU dossiers for the Minister of State. She holds a degree in Philosophy, Politics, and Economics from the University of Oxford, and a masters in International Relations from the University of Aberdeen.

Back to top

Andy Stevens

Chief Data Officer, Clear Channel International, UK

Andy Stevens is the Chief Data Officer at Clear Channel Europe (CCE) – one of the leading global outdoor media companies – where he is responsible for defining and implementing the European data strategy, including the data platform, RADAR, and new programmatic buying platform, LaunchPAD.

Andy joined CCE in May 2019, having most recently held the role of Senior Vice President of Insights and Analytics at Clear Channel Outdoor Americas (CCOA). He was the driving force behind CCOA’s RADAR – the out of home industry’s first-to-market suite of data and analytics tools that leverage mobile location data to enhance OOH for advertisers. Named one of AdWeek’s Top Mobile Innovators of 2016, RADAR continues to redefine how outdoor advertising is bought and sold in the US. Andy is now focused on rolling the tool out across CCI’s European markets and expanding the programmatic footprint via their proprietary LaunchPAD product.

Prior to joining Clear Channel, he served as VP of Strategy and Research at ShareThis and also worked at AOL and Capgemini Consulting. A published writer, Andy has authored thought leadership articles on using mobile location data to measure real world performance of OOH advertising, on social data and its monetary value for brands, and has been published in DigiDay, TechCrunch and Huffington Post.

Back to top

Anu Talus

Data Protection Commissioner, Finland, and Chair of the European Data Protection Board

Anu Talus, Doctor of Laws, Data Protection Ombudsman, Finland, began serving in this role on 1 November 2020 for a term of five years. Talus served as Deputy Data Protection Ombudsman from August 2019 where she mainly resolved matters involving the private sector and cross-border personal data processing. Her previous posts include Senior Adviser, Legislative Affairs and Special EU Adviser in the Ministry of Justice.

In her current role, Talus supervises compliance with data protection legislation and other laws governing the processing of personal data and manages the Office of the Data Protection Ombudsman. Her tasks include promoting awareness of the rights and obligations related to personal data processing and issuing opinions on legislative and administrative amendments. The Data Protection Ombudsman cooperates with the data protection authorities of other countries and represents Finland on the European Data Protection Board. In May this year, she was elected Chair of the European Data Protection Board.

Back to top

Alvin Toh

CMO, Straits Interactive, Singapore

As CMO and Head of International Operations of Straits Interactive, Alvin drives marketing strategy, awareness and partner relationships for the company’s innovative privacy solutions that build upon the foundation of responsible marketing. In addition to running the company’s marketing and international operations, Alvin is a sort after regional speaker on data protection and privacy management. With his extensive knowledge of regulatory requirements and his process driven outcome, Alvin is also involved in Straits Interactive’s data protection consulting and training engagements. Alvin is a veteran of the technology industry, first cutting his teeth as a Sales Director at Sun Microsystems and then as Regional Director at 3Com, where he managed a sales portfolio of more than $100 million in the highly competitive and regulated industries of Finance, Telecoms, Healthcare and Government. He holds an Executive MBA, International Business Administration, from Rutgers, The State University of New Jersey-New Brunswick and internationally recognised professional qualifications from International Association of Privacy Professionals, Open Compliance Ethics Group and EXIN. His credentials from these examining bodies include the Certified Information Privacy Manager and Technologist (CIPM and CIPT), the Certified Information Privacy Professional /Asia (CIPP /A) and the GRC Processional (GRCP) Certification.

Back to top

Eduardo Ustaran

Partner, Hogan Lovells, UK

Global co-head of the Hogan Lovells Privacy and Cybersecurity practice Eduardo Ustaran is widely recognized as one of the world's leading privacy and data protection lawyers and thought leaders. With over 25 years of experience, Eduardo advises multinationals and governments around the world on the adoption of privacy and cybersecurity strategies and policies. Eduardo has been involved in the development of the EU data protection framework and was listed by Politico as the most prepared individual in its 'GDPR power matrix'.

Based in London, Eduardo leads a highly dedicated team advising on all aspects of data protection law – from strategic issues related to the latest technological developments such as artificial intelligence and connected devices to the implementation of global privacy compliance programs and mechanisms to legitimize international data flows.

Eduardo is the author of The Future of Privacy (DataGuidance, 2013), a ground-breaking book where he anticipates the key elements that organizations and privacy professionals will need to tackle to comply with the regulatory framework of the future.

Back to top

Dr Ian Walden

Professor of Information and Communications Law, Queen Mary, University of London, UK, and Of Counsel, Baker McKenzie, UK

Dr Ian Walden is Professor of Information and Communications Law and Director of the Centre for Commercial Law Studies, Queen Mary, University of London. His publications include Computer Crimes and Digital Investigations (2nd ed., 2016) and Telecommunications Law and Regulation (5th ed., 2018).

Ian was a Board Member and Trustee of the Internet Watch Foundation (2004-09); the Press Complaints Commission (2009-14); a member of the RUSI Independent Surveillance Review (2014-15); a member of the Code Adjudication Panel at the Phone-paid Services Authority (2016-21); a member of the European Commission Expert Group to support the application of the GDPR (2017-21), and is a Non-Executive Board Member of the Jersey Competition Regulatory Authority (2020- ).

Ian is a solicitor and Of Counsel to Baker McKenzie. Ian is a principal investigator on the Cloud Legal Project and co-author of Cloud Computing Law (2nd ed., 2021).

Back to top

Sarah Wang Han

Head of Research, Straits Interactive, Malaysia

Sarah Wang Han is Head of Research and a consultant with Straits Interactive. In addition to her L.L.M from Hunan University, China, she also holds the CIPP/E,GRCP, EXIN Privacy and Data Protection certificate.

She is currently pursuing a doctoral degree at the University of Malaya, Malaysia with a focus on data protection law in China. Under the supervision of Professor Abu Bakar Munir, she had a paper published on European Data Protection Law Review about comparing China’s data protection legislation with that of the General Data Protection Regulation of Europe. She is now working on another paper concentrating on the privacy issue brought by cross-border data transferring. Over the past years, she has assisted companies in Singapore and Malaysia, on their path to compliance with data protection law. She also speaks in several webinars on Personal Data Protection, with a focus on compliance.

Back to top

Dino Wilkinson

Partner, Clyde & Co, UAE

Dino Wilkinson is a partner with Clyde & Co and recognised as one of the leading technology, media and telecommunications (TMT) lawyers in the Middle East. He has more than 15 years' experience of advising clients throughout the region on a range of transactional and advisory TMT matters, including data protection and privacy, cyber and data risks, IT contracting, emerging technology regulation and related issues.

Dino has supported local and international organisations doing business in the Middle East and worked with regional governments and regulators on a number of significant legislative developments in this area, including the drafting of electronic commerce laws, data sharing policies and privacy legislation.

Dino was recently named in the Hall of Fame by The Legal 500 for UAE technology lawyers and he is ranked as a Band 1 leading individual by Chambers Global 2020 with one source praising him as "the leading expert on privacy and data protection in Dubai."

Back to top

Ashley Winton

Partner, Mishcon de Reya, UK

A former computer designer, Ashley is a fintech and privacy Partner within Innovation Department of Mishcon de Reya LLP. He advises on data protection, privacy and cyber security, artificial intelligence, payment systems, financial regulation, encryption and export control.

He advises extensively on the impact of privacy and information security law on cloud services, financial technology, telecommunications and international data transfers and has a particular focus on the intersection between law and technology, particularly for regulated businesses.

For many years Ashley has advised the online behavioral advertising industry in Europe and has represented that industry in relation to its dealings with the European Commission, the Article 29 Working Party, the European Parliament and various national governments. He is currently helping a number of charities and not for profit organisations lobby for improvements to the soft opt in under the prospective e-Privacy directive.

He is the Chairman of the Data Protection Forum, the longest running independent data protection association in the UK.

Back to top

Dr Ulrich Wuermeling

Visiting Professor for Privacy and Data Protection law, Queen Mary, University of London, UK, and Counsel, Latham & Watkins, Germany/UK

Ulrich Wuermeling is Visiting Professor for Privacy and Data Protection Law at Queen Mary University of London. In 1993, he obtained his LLM in International Business Law from Queen Mary University of London and wrote his LLM thesis on the - then draft - European Data Protection Directive. In 1998, he obtained his doctorate from the University of Würzburg with a thesis titled “Trade Barrier Privacy”. He regularly speaks at conferences and publishes on data protection law issues and is co-editor of the blog Global Privacy and Secrutiy Compliance Law blog.

Since 2000, Ulrich has been chairman of the annual Data Protection Conference (Datenschutzkongress) in Berlin. Prior to joining the London office of Latham & Watkins, he headed the German Technology Transactions practice and was global co-chair of the Information Technology Industry Practice Group of the firm. As an attorney, he advises on complex data protection matters and has represented clients in a large number of high profile disputes with data protection authorities, consumer protection groups and individuals.

Back to top

Chris Wylie

Head of insight and emerging technologies, H&M, UK

 

Back to top

Newton Yiu

Senior Legal Counsel, Tencent, Hong Kong

Newton joined Tencent’s International Privacy and Data Protection Department in 2021. He currently advises and supports Tencent’s Cloud & Smart Industries Group and Interactive Entertainment Group on data protection compliance.

Newton is a practising solicitor in Hong Kong and is a graduate of the University of Warwick (LLB). Before joining Tencent, Newton worked as an Associate at Bird & Bird, where he advised clients from various industries including technology, retail, hospitality, media and entertainment on matters regarding data protection compliance.

Back to top