DataGuard 

Senior Consultant Privacy 

Senior Consultant Privacy - Global Corp.

Rehabilitation Culture CIC

Rehabilitation Culture is a small Community Interest Company that supports men over 50 in prison in preparation for their release

Director

DPOrganizer

Senior Data Protection and Customer Solutions Expert

BCS, The Chartered Institute for IT

Head of Compliance

Compliance Manager

Data Protection Lead

My background in front line operations, compliance, management and training in financial institutions, stood me in good stead when I fell into the world of Data Protection.  I qualified as a Data Protection Practitioner in December 2019 and I've been hooked ever since!

Recognised as being a highly motivated individual with strong communication skills, I was shortlisted and a finalist in the categories of Rising Star and Compliance Officer of the year at the PICASSO awards in 2022.

Having presented at a number of international conferences, spoken on panels and contributed to international privacy drives I enjoy enthusing others, sharing my knowledge to stakeholders helping them develop and strong and uncomplicated privacy culture and ethos across the organisation.

As an ISO 9001 Quality Management Systems Lead Auditor, I believe that compliance of all relevant legislation should part of an organisations culture and not a tick box exercise. My ability to interpret and delivery regulatory requirements across the business, whilst maintaining high internal principles and keeping external business drivers at the fore, ensures that compliance does not become an afterthought in the business.

In my current role, I work with a number of international clients of all sizes, helping them to develop and deliver their privacy programme in a manner that suits their organisation.  Understanding the customers drivers and priorities is critical to success.

My passion for data protection privacy is linked closely to my passion for people. I firmly believe that data protection and privacy is not and should not be just a work thing but a life thing. Data protection and privacy are all about looking after people - just like you and me.

Elizabeth Smith

Senior Consultant Privacy

Key responsibilities:
- advising EU and UK clients on privacy issues, identifying compliance risk picture and suggesting risk mitigation measures;
- generating of client-oriented privacy content serving as a part of 'product tool' - EU/UK GDPR requirements trackers, compliance risks trackers, etc.

Privacy Consultant & Manager

Purpose and Means

Official IAPP trainer for CIPP/E course, GDPR consultant and speaker.

IAPP trainer, GDPR consultant

Carlsberg Group

Key responsibilities:
- Combining strategic driving of the data protection agenda with operational tasks, leading cross-functional privacy project, developing best practices and implementing them into business;
- Re-designing business processes in a privacy-compliant way (10+ core business processes re-designed), providing legal advice, serving as a trusted contact person for business, HR and IT;
- Developing and implementing policies, tools and templates, negotiating data transfer agreements with third parties and IT vendors, executing Carlsberg Group compliance activity plans;
- Providing support to Carlsberg HQ on data protection issues involving local law, serving as a knowledgeable partner for DPRs across EE;
- Rolling out data protection training and awareness campaigns on a yearly basis (trained 2000+ relevant stakeholders);
- Investigating data breaches, conducting related risk assessment based on the ENISA’s recommendations.

Chief Privacy Officer (Russia) at Carlsberg Group

Key responsibilities:
- reviewing data processing agreements with U.S.-based vendors
- developing assessment strategies with regard to level of protection in third countries

Member of 'Schrems II' Working Group (remote)

Key responsibilities:
- Assisting 18 EEA markets to build local records of data processing activities;
- Drafting website privacy notices and forms of consent;
- Developing the GDPR training documentation and conducting training sessions for 18 EEA markets and 5 CIS markets (developed 15+ GDPR training packages, co-lead 5+ training sessions)

Accomplishments:
- Updated data inventories for 18 EEA markets;
- Developed 15+ GDPR training packages, co-lead 10+ training sessions;
- Developed and updated 10+ forms of consent and notification, manuals, guidelines.

Data Protection Associate (on a short-term assignment)

Globus.ai

- Advising on specific data processing activities and Privacy by Design, balancing the requirements of GDPR and Norwegian law against business needs;
- Conducting gap and risk analysis, auditing current privacy practices and data processing activities in partnership with key stakeholders from Sales, Marketing and IT;
- Conducting data mapping and building records of processing activities (solely built the records of the data controller from the ground up);
- Carrying out vendor management, reviewing and negotiating data transfer agreements with IT vendors and customers;
- Conducting IT product/system analysis from a legal standpoint, advising on software tools to be used.

GDPR Consultant & Manager

Privasee

Developing the GDPR audit and maturity assessment tools, providing legal opinions on data protection, drafting privacy notifications and data processing agreements.

Data Protection collaborator

Baltic Leasing, Group of Companies (Top 8 leasing companies in Russia in RAE Expert Ranking, 2018)

Key responsibilities:
- conducting client due diligence and third party compliance screening, identifying legal risks in the process of making agreements and taking strides towards their minimization;
- providing comprehensive legal advice on issues involving business law (including contract law, law of obligations, insolvency legislation, execution legislation);
- drafting, negotiating, and conducting the examination of international supply contracts and related documents (bank guarantees, etc.)
- handling claims and pleading cases in courts of arbitration and regular courts (disputes on sales contracts, leasing, lease, insolvency, etc.);
- developing complex procedural documents involving various legal issues – claims, claim letters, responses to claims, queries, complaints, petitions, etc.;

Main accomplishments: the share of won cases in courts exceeds 90%; the number of successfully accomplished projects exceeds 500; obtained extensive experience of the application of business law

Senior Legal Counsel

Key responsibilities:
- providing thorough legal analysis of corporate documents of contractors; - pleading cases in courts of arbitration and regular courts (multiple legal areas); - delivering legal advice on basic issues involving application of business law; - developing basic procedural documents.
Main accomplishments: deepened knowledge in business law, successfully passed an internal exam to be promoted for a position of Senior Lawyer.

Legal Counsel

I am a CIPP/E, CIPM, FIP certified privacy & data protection lawyer and manager with 5+ years of experience combining expertise in the European and Russian data protection landscapes.

In the capacity of in-house Chief Privacy Officer, I acquired an experience of the comprehensive privacy program development from the ground up.

More about me:
• Contributor for the European Essential Guarantees Guide (https://www.essentialguarantees.com)
• Co-author of the Virtual Shadows privacy blog (https://blog.virtualshadows.com)
• GDPR researcher and LinkedIn blogger
• IAPP member

Interviews with me:
• Swiss cyber forum - https://swisscyberinstitute.com/blog/interview-with-cyber-security-expert-konstantin-tiazhelnikov/

Video:
• Talks on data breaches for Dr. Zero Show - https://www.youtube.com/watch?v=ChjZ9KwIYt8
• Speaking at the RPPA Privacy event on the EU Commission Standard Contractual Clauses and Transfer Impact Assessment (TIA) - https://www.youtube.com/watch?v=WQNZ4STo47I

taplio

The Battle

Elizabeth Smith

Konstantin Tiazhelnikov

Followers

Posts

Engagements

Likes

Ready to grow your LinkedIn presence?