Expertise in data protection law.

My professional practice focuses on privacy and data protection law, data protection governance, and the practical implementation of legal requirements. My experience includes performing the functions of a Data Protection Officer, advising organisations, assessing complex personal data processing activities, and developing solutions that support lawful and responsible processing of personal data.

I have gained professional experience in state-owned and private corporate groups across the financial services and technology sectors. This includes banking, insurance, pension fund and asset management, payment and electronic money services, as well as financial technology (FinTech), digital asset and crypto-asset services, and Web3 business models. Working across different regulated sectors has given me a broad understanding of business processes, technological solutions, and the risks associated with personal data processing.

In my work, I place particular emphasis on integrating data protection requirements into organisational activities, assessing new information systems, artificial intelligence and other technological solutions, managing data protection risks, and identifying appropriate technical and organisational measures. My aim is to provide legally sound and workable solutions that meet business needs while ensuring appropriate protection of personal data and respect for individuals’ rights and freedoms.

My professional practice is complemented by academic experience: I have taught personal data protection at university level. This combination of academic and practical experience enables me to assess data protection matters systematically, taking account of the legal framework and its application in practice, as well as the challenges organisations face in their operations.