PROGRAMME AND SPEAKERS
1 March 2026
Arrival
18:00: Dinner (*) at Hotel Crusch Alva
(*) Please note that the informal get-together dinners on Sunday and Tuesday are not included in the conference fee and must be paid in advance through the ticketing process. It is important to ensure that you have purchased the tickets for the informal get-together dinners on Sunday and Tuesday evenings as well.
2 March 2026
8:30: Doors Open | Registration, Coffee & Networking
9:00: Official Welcome – WE START!
9:15: Keynote “Data Protection under pressure? Debates in Brussels and Luxembourg”
• Herke Kranenborg, Member of the Legal Service of the European Commission & Professor in European Privacy and Data Protection Law at Maastricht University, Belgium
10:15: Workshops
Workshop 1: “Neuroprivacy & Brain Data: Protecting the Last Frontier”
• Baroum Mrad, Chief Privacy and Compliance Officer (CPCO), Head of Data Protection & Compliance Department of Ente Ospedaliero Cantonale (EOC), Switzerland
Workshop 2: “NIS2 / DORA”
• Martin Lutz, Chief Information Security Officer (CISO) – VE DACH & CEE ICT at VINCI Energies, Switzerland
11:15: Round-up and coffee break
11:45: Panel discussion “Healthcare & Life Science”
• Efstathia (Efi) Gkika, Deputy General Counsel-Chief Privacy Officer at Baxter International, Switzerland
• Jonathan Green, Director, Privacy Analytics, Europe at IQVIA, UK
• Pierre-Yves Lastic, Secretary General EFDPO, Vice-président UDPO & Consultant for Privacy & Information Management in Life Sciences, France
• Laura Liguori, Partner at Portolano Cavallo Studio Legale, Italy
• Cécile Théard-Jallu, Partner at De Gaulle Fleurance Avocats Notaires, France
12:45: Lunch in the winter sun
14:00: Workshops
Workshop 1: “Generative AI, Privacy & Robotics”
• Mona Naomi Lintvedt, Associate Professor II, Norwegian Research Center for Computers and Law, University of Oslo & Special Advisor, The Norwegian Tax Administration, Norway
Workshop 2: “Privacy-enhancing technologies (PETs) in a Post-Omnibus World: from Compliance to Competitive Edge”
• Lauren Cuyvers, Senior Managing Associate, EU Data Privacy and Cybersecurity at Sidley Austin LLP, Belgium
15:00: Round-up
15:30: End of Program at the Lyceum Alpinum in Zuoz
Transport to Celerina for Dinner
A bus has been organized for your convenience to and from Celerina. Choose your preferred pickup station.
17:00: Departure from the Lyceum
Please gather at the conference location. Note that the bus cannot drive all the way up. It will be parked down by the tennis court. Follow the path past the barrier and you will easily spot the bus.
17:05: Additional Pickup
Zuoz Train Station
Approx. 17:20: Arrival in Celerina
From Celerina, we take the exclusively reserved gondola up to the mountain station.
Gondola Ride to Chesa Marguns
At the valley station, guests will be welcomed with warm drinks before boarding the gondola. The gondola is exclusively reserved for our group and operates in three waves, with around 20 participants per ride.
18:00: Dinner at Chesa Marguns [with Special “Privacy Sparks”-session; speed TED-Format]
Upon arrival at the mountain station, it is only a very short walk of around 30 steps to reach Chesa Marguns. A warm welcome apéro will be served on the lower level before we continue upstairs for dinner. The evening promises a cosy, wintry atmosphere surrounded by snow, offering an authentic Alpine experience across two charming floors. Please note that warm, sturdy footwear is essential due to the winter conditions.
23:30: Return to Zuoz
We will begin the gondola descent, arriving back in Celerina at approximately 23:00. The bus will depart shortly afterwards, returning to Zuoz Train Station with an estimated arrival time of 23:30.
3 March 2026
09:15: Doors Open | Registration, Coffee & Networking
9:30: Keynote “EU Digital and Data Law: Recent Developments and Emerging Directions”
• Univ.-Prof. Dr. Nikolaus Forgó, Professor of Technology Law and IP-Law, Head of the Department of Innovation and Digitalisation in Law, University of Vienna, Austria
10:30: Workshops
Workshop 1: “Beyond BYOD: How AI Glasses Rewrite Workplace Privacy and Compliance”
• Aleksandra Aytova, FIP, Group Head of Privacy at Applegreen, Ireland
• Georgia Voudoulaki, Senior Legal Counsel at Robert Bosch, Data Security & Projects, Certified Compliance Officer (Univ.) and Adjunct Professor, Germany
Workshop 2: “AI-powered cyber-attacks and cross-border incident response”
Moderator: Laura Liguori, Partner at Portolano Cavallo Studio Legale, Italy
• Ana Hadnes Bruder, Partner at Mayer Brown, Gemany
• Martin Lutz, Chief Information Security Officer (CISO) – VE DACH & CEE ICT at VINCI Energies, Switzerland
11:30: Round-up and coffee break
12:00: Panel discussion “New privacy laws emerging across significant economies: A View from Asia and the Middle East”
• Azmul Haque, Managing Director at Collyer Law LLC, Singapore
• Jun Li, Partner at Han Kun Law Offices, China
• Nick O’Connell, Partner at Bird & Bird, Saudi Arabia
• Vikram Jeet Singh, Partner & Head of Technology, Media and Communications at BTG Advaya, India
13:00: Lunch in the winter sun
14:00: Panel discussion “GDPR Enforcement”
• Rafi Azim Khan, Partner & Head of Digital Law – Global co-Chair Ad & Media Law at Crowell & Moring, USA & UK
• Michael Will President of Bavarian Data Protection Authority for the Private Sector, Germany
• Austrian Data Protection Authority [More information coming soon]
15:00: Coffee break
15:30: Panel discussion “The EU–US Data Privacy Framework is active but faces legal uncertainty (potential “Schrems III” challenge)”
• Jason Johnson, Partner & CHS Managing Director at Crowell & Moring, USA
• Odia Kagan, Partner & Chair of GDPR Compliance & International Privacy at Fox Rothschild, USA
• Rafi Azim-Khan, Partner & Head of Digital Law – Global co-Chair Ad & Media Law at Crowell & Moring, USA & UK
16:30: End of Program at the Lyceum Alpinum in Zuoz
Transport to St. Moritz for Dinner
A bus has been organized for your convenience to and from St. Moritz. Choose your preferred pickup station.
18:00: Departure from the Lyceum
Please gather at the conference location. Note that the bus cannot drive all the way up. It will be parked down by the tennis court. Follow the path past the barrier and you will easily spot the bus.
18:05: Additional pickup
Zuoz Train Station
Approx. 18:30: Arrival in St. Moritz
19:00: Dinner (*) at Restaurant Chesa Veglia of Badrutt’s Palace [with Special “Privacy Sparks”-session; speed TED-Format]
Via Veglia 2, 7500 St. Moritz
23:30: Return journey to Zuoz
Please meet at Badrutt’s Palace entrance for the bus ride back to Zuoz Train Station.
(*) Please note that the informal get-together dinners on Sunday and Tuesday are not included in the conference fee and must be paid in advance through the ticketing process. It is important to ensure that you have purchased the tickets for the informal get-together dinners on Sunday and Tuesday evenings as well.
Interactive sessions designed for engagement
Each conference day starts with an insightful keynote, setting the stage for a series of dynamic workshops. Choose from two parallel sessions each tailored to foster deep dives into specialized topics. Our workshops are intentionally designed for smaller groups to ensure active participation and direct interaction with experts. Every workshop session wraps up with a comprehensive round-up, where speakers summarize key discussions and insights.
Beyond the sessions: Experience Alpine Privacy Days
Alpine Privacy Days is more than a conference; it’s an immersive experience. Surrounded by the serene landscape of Zuoz, the event is complemented by an exquisite social program. From networking dinners to guided tours, each aspect is crafted to enhance your stay and provide ample opportunities for informal discussions and relaxation.
Meet our esteemed speakers
At Alpine Privacy Days, engage with leading experts who are shaping the future of privacy and data protection. Our lineup includes distinguished speakers offering their expertise and unique insights. These experts will provide you with the latest updates and trends in privacy laws, AI, cybersecurity and more, enriching your knowledge and expanding your professional network.
SPEAKERS OF THE NEXT EDITION 2026
Aleksandra Aytova
Group Head of Privacy, Applegreen, Ireland
Dr. Aleksandra (Assia) Aytova is the Group Head of Privacy at Applegreen. She brings extensive experience as a barrister, assistant professor, in-house counsel, and external privacy advisor in the AdTech, FinTech and Retail sectors. She has led the development, implementation, monitoring, and certification of Information Security, Privacy, and AI Management Systems.
A recognized expert in multijurisdictional privacy frameworks and AI governance, Dr. Aytova is deeply passionate about the intersection of human rights and technology, offering innovative insights into the ethical challenges posed by technological advancements.
She is a Certified Information Privacy Professional (CIPP/E), a Certified Information Privacy Manager (CIPM), and a Fellow of Information Privacy (FIP) from IAPP. Additionally, she is an Internal Auditor, Lead Auditor, and Lead Implementer for ISO 27001 (Information Security Management) and ISO 27701 (Privacy Information Management) from Intertek.
Aleksandra holds a Ph.D. in Fundamental Rights from Sofia University “St. Kliment Ohridski,” a master’s degree in IT Law from the University of Tartu, and a master’s degree in Law from New Bulgarian University. Recently, she completed a specialization in Artificial Intelligence and Machine Learning at MIT.
Rafi Azim‑Khan
Partner & Head of Digital Law – Global co-Chair Ad & Media Law at Crowell & Moring, USA & UK
Head of Digital Law, Europe at Crowell and Global Co-Chair of the Advertising & Media Law Group. For over 25 years, Rafi has been ranked by Legal 500 (including as Hall of Fame), Chambers and Insider’s Guides as one of the leading digital, AI, data, marketing and e-commerce lawyers. Rafi has written/co-written 5 books including E-Business, Regulation of the Internet and Ad Law and is regularly interviewed by leading journals, including Bloomberg, The Times, BBC, FT and The Economist. He advises many global multinationals and household names, as well as ambitious start-ups on data privacy, AI, adtech, e-commerce, international platform and product launches, consumer law, dealings with competitors, the ICO and other DPAs, ASA, CMA, FTC and other regulatory matters. Rafi has handled projects dealing with autonomous vehicles, augmented reality, GDPR, CCPA, AI regulations and laws across 40+ different countries. He has rare global experience from 25+ years of working in Silicon Valley and with international clients launching new platforms, products or technology.
Andrea Batalla Eguidazu
Senior Privacy Counsel, Baxter International, UK
Andrea Batalla Eguidazu is a multilingual lawyer with over a decade of expertise in data protection and privacy. Her career began at leading international law firms, including DLA Piper and Cooley, where she advised global organizations on complex privacy and regulatory matters across offices in Spain, Amsterdam, and London. Her work has consistently focused on the life sciences sector and cutting-edge technologies such as AI, digital health, and connected care solutions. Based in the UK, she currently serves as Senior Privacy Counsel at Baxter International, where she leads strategic global projects and plays a key role in shaping Baxter’s privacy program across LATAM and APAC, while also contributing to the company’s AI Governance Team. She partners with global and regional stakeholders to enable compliance and innovation in areas including AI, clinical trials, HR, Quality, and Patient Safety. She is recognized for her holistic approach to data protection, her ability to navigate an evolving regulatory landscape with precision, and her commitment to driving privacy initiatives that safeguard trust while supporting technological progress.
Ana Hadnes Bruder
Partner, Mayer Brown, Germany
Clients turn to Ana Bruder for strategic advice in data privacy, cybersecurity and related matters, including the analysis of applicability and impact of old and new EU legislation such as the GDPR, NIS2 Directive, the Digital Operational Resilience Act (DORA), the Cyber Resilience Act (CRA), the Data Act and the Digital Services Act (DSA). Ana assists clients preparing for and reacting to cybersecurity incidents, including working closely with clients’ cybersecurity, legal, management and communications teams as well as external forensic investigators, IT consulting firms and PR advisors to mitigate legal risks, assess and make required data breach notifications.
Corporations also benefit from Ana’s experience in artificial intelligence (AI) matters, her comprehensive approach to the intersection of AI, privacy and cybersecurity, as well as the regulatory requirements under the EU AI Act. Ana assists clients with governance best practices, the classification of AI systems and AI risk management frameworks. Additionally, clients seek out Ana’s counsel on technology transactions including cloud services, data and software licensing agreements, SaaS agreements, software development projects, e-commerce, and related cybersecurity and data privacy questions.
International clients, in particular, look to Ana for advice, as she has served as legal counsel in Germany, France and Brazil.
Lauren Cuyvers
Senior Managing Associate, EU Data Privacy and Cybersecurity, Sidley Austin LLP, Belgium
Lauren Cuyvers focuses her practice on strategic cross-border compliance, regulatory enforcement, and litigation related to EU data privacy, digital, and cybersecurity laws, with a particular emphasis on legislation related to AI. Her practice covers the full spectrum of, and strategic interactions between, the EU AI Act, GDPR, EUDPR, ePrivacy Directive, EU Data Act, Cyber Resilience Act, NIS2 Directive, and DORA. Lauren is a highly technical lawyer and has deep experience guiding multinational companies through complex EU and UK regulatory frameworks, focusing on regulatory risk and strategy, complex cross-border incident response, high-stake regulatory investigations, and crisis management. Lauren’s practice also covers data privacy and cyber transactional work, particularly in data-heavy transactions.
Lauren assists clients in a range of industries, including in the payments, energy, private equity, and life sciences sectors, but has a particular interest and focus on the tech industry, having advised and represented the world’s leading companies in the social media, cloud computing, data centre, software, and semiconductor space.
Nikolaus Forgó
Professor of Technology Law and IP-Law, Head of the Department of Innovation and Digitalisation in Law, University of Vienna, Austria
More to come soon
Efstathia (Efi) Gkika
Deputy General Counsel & Global Chief Privacy Officer, Baxter International, Switzerland
Efi Gkika, based out of Zurich, is a multilingual lawyer with over 17 years of experience in the pharmaceutical and medical devices sector, specializing in Legal, Compliance, and Data Privacy. She currently serves as Deputy General Counsel and Global Chief Privacy Officer at Baxter International, where she has been a strategic partner to the C-Suite since 2018, driving initiatives in privacy compliance, AI, digital transformation, digital health, connected care, and M&A. Efi began her career at a leading international law firm within one of the Big Four and has held key roles at Roche and Novartis. She chairs the MedTech Europe Privacy Committee and is recognized for her thought leadership in privacy and emerging technologies.
She holds a Law degree from the University of Athens, an LLM in European Law from Université libre de Bruxelles, and an LLM in International Business Taxation from the Athens University of Economics and Business. Efi has completed executive education on Digital Transformation at Cambridge Judge Business School, AI training with IAPP, and is currently pursuing a Board Readiness Diploma at IMD.
Jonathan Green
Director, Privacy Analytics, Europe, IQVIA, UK
As lawyer with 30 years post qualification experience, Jonathan has worked across diverse healthcare settings as a Regulatory Lawyer.
Jonathan is an experienced and accredited Project and Programme Manager. Jonathan is currently the Programme Director of the Privacy Enhancing Technology collaboration with the UK National Health Service Federated Data Platform.
Jonathan joined IQVIA’s Privacy Analytics team in 2024, having been Director of Programme Management for the UK Government’s National COVID19 Infection Survey.
Jonathan is actively collaborating with Governments and Healthcare Providers across Europe, Middle East and Africa to support the development of emerging their data transformation solutions; enabling them to achieve the careful balance between maintaining public trust and the security of the patient’s data, with maximising the full value of the data for its intended use.
Azmul Haque
Founder & Managing Director at Collyer Law, Singapore
Azmul is a tri-qualified lawyer, admitted to practice law in England, India, and Singapore. Over the last 22 years, Azmul has developed particular expertise in complex, cross-border corporate transactions (mergers, acquisitions and divestitures, joint ventures and strategic alliances, private equity, venture and angel financing), commercial contracts involving technology-related matters (SAAS, PAAS, outsourcing, franchising and licensing) and regulatory matters in a range of areas that impact business (corporate governance, securities & futures regulations, data protection, crypto-currency regulation) and evaluating innovative business models disrupting traditional industries.
Azmul has worked extensively with MNC and Asian corporations, family-owned businesses, and high-net worth individuals. His geographical experience spans South Asia, particularly the India-Singapore corridor, ASEAN and the Middle East. He has lived and worked in Mumbai, Singapore and London.
He has been rated as a leading practitioner for the TMT sector, and focusses currently on clients in emerging technology, particularly FinTech, Digital Health, AdTech, and BlockChain. Prior to founding Collyer Law, Azmul was Consultant Partner at Olswang, and Partner with Shook Lin & Bok. He has also worked with Silver Circle firm, Berwin Leighton Paisner and WongPartnership.
Jason Johnson
Partner & CHS Managing Director at Crowell & Moring, USA
Jason Johnson is a Partner in Crowell & Moring’s Privacy & Cybersecurity and Health Care groups. Jason advises a variety of companies on a broad range of federal and state issues, including regulatory, contractual, and compliance matters, related to data privacy and cybersecurity. Jason’s practice includes counselling clients on the complicated regulatory and compliance issues related to the privacy and security of data under US and internaional laws (including HIPAA and GDPR) and complex transactional matters related to global compliance and governance programs, website privacy policies, technology license agreements, security incident response, cyber risk management, cross-border data transfers and emerging issues with artificial intelligence.
Jason also has broad experience in the pharmaceutical and biotechnology research arena, having been a bench top research scientist formerly at Duke University Medical Center and Eli Lilly (formerly Sphinx Pharmaceuticals). This extensive clinical research background informs his understanding of the legal and regulatory challenges that companies face in this area. Jason uses this practical experience to guide his clients through all aspects of healthcare privacy and research and development. Jason’s clients in this area include academic medical centers, healthcare technology companies, emerging to late-stage biotechnology companies, pharmaceutical and medical device companies and other healthcare and research related organizations.
Jason is a registered agent with the United States Patent and Trademark Office with over 11 years of experience as a patent litigator. His substantial experience in the intellectual property landscape enables him to evaluate and implement the best strategic business strategies for his clients’ needs.
Odia Kagan
Partner & Chair of GDPR Compliance & International Privacy at Fox Rothschild, USA
Odia Kagan is Partner and Chair of GDPR Compliance & International Privacy at Fox Rothschild LLP. Odia combines her in-depth knowledge of privacy and data security regulations and best practices, both domestic and international, with her keen understanding of emerging and information technologies to provide clients with practical advice on how to design and implement their products and services, consummate their M&A transactions and engage third-party vendors in the United States and abroad.
Over the past few years, Odia has assisted more than 80 companies, from U.S.-based multinationals to startups, on their path to compliance with the EU General Data Protection Regulation (GDPR). She leverages her transactional experience leading M&A and tech transactions as well as her ability to break down complex concepts into easy-to-understand action items to provide effective, ongoing counsel to clients in their day-to-day operations.
Odia is certified as a Privacy Law Specialist (PLS) and Fellow of Information Privacy (FIP) by the International Association of Privacy Professionals (IAPP), designations that demonstrate significant achievements in and comprehensive knowledge of privacy and data protection law. She has also been certified by IAPP as a Certified Information Privacy Manager (CIPM) and a Certified Information Privacy Professional in the laws of the United States – private sector (CIPP/US), the laws of the European Union (CIPP/E) and by the PECB as a Certified Data Protection Officer (CDPO).
Herke Kranenborg
Member of the Legal Service of the European Commission & Professor in European Privacy and Data Protection Law at Maastricht University
Prof. Herke Kranenborg is a member of the Legal Service of the European Commission, working mainly in the field of privacy and data protection. In that role he advises the Commission and its departments in these areas and represents the Commission in litigation before the EU Court of Justice in Luxembourg. He has represented the Commission in close to 150 cases before the EU Court of Justice concerning data protection. In addition, Herke Kranenborg holds a chair as professor in European Data Protection and Privacy Law at Maastricht University, situated in the Maastricht Centre for European Law (MCEL) and the European Centre on Privacy and Cybersecurity (ECPC). Previously, Herke Kranenborg worked at the office of the European Data Protection Supervisor, and was affiliated senior researcher at the Institute for European Law of the K.U. Leuven.
Pierre-Yves Lastic
Secretary General EFDPO, Vice-président UDPO & Consultant for Privacy & Information Management in Life Sciences, France
More to come soon
Jun Li
Jun Li, Partner, Han Kun Law Offices, China
Ms. Li has been practicing law since 2003. Before joining Han Kun, Ms. Li was of counsel with another leading Chinese law firm and worked for seven years in the China practice groups of several pre-eminent international law firms. She also previously served for three years as an in-house general counsel for two investment firms.
Ms. Jun Li specializes in cross-border and domestic mergers and acquisitions, direct investment, and corporate matters. Ms. Li has accumulated extensive experience in handling cross-border transactions and investments, and has successfully assisted numerous clients in establishing or acquiring various types of enterprises. She not only provides strategic advice and day-to-day operational counsel to a wide range of corporate clients, but also offers comprehensive legal support for Chinese clients’ overseas transactions. In addition, Ms. Li is also focused on data protection, providing legal services in network data security and personal information protection to many businesses.
Her clients span a wide range of industries, including e-commerce, education, clean energy, consumer goods, information technology, and various manufacturing sectors.
Ms. Li has published many professional articles and commentaries for major international legal directories and media, including Chambers and Partners, Practical Law China, and LexisNexis.
Educational background
Ms. Li received an LL.B. degree from Wuhan University School of Law in 2000, an LL.M. degree from Fudan University Law School in 2003, and an LL.M. degree from the University of Virginia School of Law in 2006.
Laura Liguori
Partner, Portolano Cavallo Studio Legale, Italy
Laura is a partner of the firm since 2004, after having worked for an independent law firm from 1997 to 2003 (where she was appointed as partner in 2001). Laura advises Italian and foreign clients on personal Privacy, Cyber Security and Data Protection, IT, Internet and Ecommerce, Artificial Intelligence and IoT.
She has focused for more than 25 years on Privacy, Cyber Security and Data Protection, Compliance, Litigation, Commercial Contracts and all legal issues concerning Internet and Ecommerce, TMT, Investigations, Digital-Media-Tech, consumer law and unfair commercial practices. Her industry focused expertise covers Advertising and Marketing, Life Sciences-Healthcare and clinical trials, Fashion and Luxury.
Laura advises clients on all the complex legal issues concerning social networks, information governance, protection of databases, data mining, big data and predictive analyses, profiling and automated decision making, biometrics, cookies, employee monitoring, whistleblowing hotlines, location based services, cross border transfers of data, data breach management cases, user generated contents, data scraping, etc.
Laura speaks regularly at seminars and conferences on internet and data protection related matters, and she is the author of several articles in law reviews, such as Data Protection Law & Policy, eHealth Law & Policy, World Data Protection Report, etc.
Laura is ranked by Chambers Europe 2025 in the TMT: Information Technology sector (Band 2) and for TMT: Data Protection (Spotlight), by The Legal 500 EMEA 2025 in both the “Data Privacy & Data Protection” (“Hall of Fame”) and the “TMT” sectors (“Leading partner”), by the Expert Guides (Legal Media Group) in both the “Information Technology” and the “Women in Business Law” categories.
She is also recognized by Who’s Who Legal in several guides: the Data 2024 guide (“Global Elite Thought Leader” for “Data Privacy & Protection” and “Data Security”; “Recommended” for “Information Technology”), Telecoms, Media & Entertainment 2024 (“Recommended” for “Telecoms & Media”), Thought Leaders Global Elite – Data 2023 (“Data Privacy & Protection” and “Data Security”), Thought Leaders – Data 2023 (“Thought Leader” for “Data Privacy & Protection” and “Data Security”), Italy 2023 (“Data”).
Laura graduated cum laude from the Luiss Guido Carli of Rome in 1996, with a dissertation on the first Italian law on data protection and privacy.
She is a member of the Scientific Committee of the Italian Privacy Institute (an Italian data protection think tank), of The International Association of Privacy Professionals (IAPP), she is President of the ITechLaw Association, and she is vice president of the Women&Tech – Donne e tecnologie Association.
She has obtained the Certified Information Privacy Professional/Europe (CIPP/E) certification and the Certified Information Privacy Manager (CIPM) certification through the International Association of Privacy Professionals (IAPP).
Mona Naomi Lintvedt
Associate Professor II, Norwegian Research Center for Computers and Law, University of Oslo & Special Advisor, The Norwegian Tax Administration, Norway
Naomi Lintvedt holds a PhD in privacy within human–robot interaction, titled “Law of the Robot: EU Law on Privacy in Human–Robot Interaction – Misconceptions, Fragmentations, and Complexities.” She has extensive expertise in both the legal and technical dimensions of digitalising public-sector services. Currently, Naomi serves as a Special Advisor at the Norwegian Tax Administration, where she works on multidisciplinary initiatives related to AI system implementation, legislative drafting and strategic advisory tasks. In addition, she holds a part-time position as Associate Professor II at the Faculty of Law, University of Oslo, contributing to the development and teaching of the interdisciplinary master’s program in e‑government studies.
Martin Lutz
Chief Information Security Officer (CISO) – VE DACH & CEE ICT at VINCI Energies, Switzerland
Martin Lutz is a cybersecurity leader with over a decade of experience advancing security programs and operational resilience across organizations in Europe and Asia. In his current role as Chief Information Security Officer (CISO), he brings a strategic, business-aligned approach to building and leading security functions that meet the demands of a complex regulatory and threat landscape.
He has deep expertise in designing and implementing Information Security Management Systems (ISMS) based on NIS2, ISO 27001, NIST and other Cyber Security standards. Martin is skilled in shaping Cyber Security strategies, establishing governance frameworks, and building a strong Security culture through education and stakeholder engagement.
An active public speaker, he regularly shares insights on risk management, compliance, and emerging trends at industry events, helping organizations navigate the evolving cybersecurity landscape.
Baroum Mrad
Chief Privacy and Compliance Officer (CPCO), Head of Data Protection & Compliance Department of Ente Ospedaliero Cantonale (EOC), Switzerland
Baroum Mrad is a seasoned C-level Data Protection and Compliance Officer with 15 years of expertise in privacy, data science, and healthcare. Combining engineering, business, and legal skills, he is an elected member of the Cantonal Data Protection Commission of Ticino. His expertise lies at the intersection of legal and technological aspects of healthcare, particularly neuro-rights and Internet of Bodies (IoB), making him a unique asset in the industry. Baroum is a passionate public speaker, focusing on data ethics in healthcare and AI, privacy by design, and regulatory compliance. He advocates for robust cyber policies and data governance, driving impactful policy development and digital innovation in the healthcare sector.
Nick O'Connell
Partner at Bird & Bird, Saudi Arabia
Nick O’Connell is a Partner working in Tech & Comms and Privacy & Data Protection. He has been based in the Middle East for most of the last 18 years, assisting local and international clients by providing specialist legal support on diverse matters in the broader technology, media and telecommunications space.
Nick moved to Dubai from New Zealand in 2006, initially specialising in intellectual property before developing expertise in technology, media, telecommunications and data matters. In 2018, he moved to Saudi Arabia, where he built and managed the first genuine “on-the-ground” specialist TMT practice in the Kingdom, gaining great insight into the regulatory and business landscape in this key market. He now splits his time between the UAE and Saudi Arabia.
Given the nature of the Gulf markets, Nick’s practice is very diverse. It ranges from legal support on transactions with a tech angle through to regulatory advisory in the broader technology, media and telecommunications space. Much of the advisory work relates to discrete, ad hoc queries, although it also includes significant ongoing advisory projects, including in respect of major tech investments in the region.
Nick often assists international clients from outside the region seeking local insight in respect of new opportunities in an unfamiliar region; they appreciate a sensible perspective on what can sometimes be a challenging or opaque legal environment. Instructions from local clients (both private sector and government) are an increasing part of his work as the region invests for the future; these clients appreciate the international perspective and expertise that he brings. Whether international or local, Nick likes to think that all his clients see him as a “safe pair of hands”.
Nick regularly contributes to publications relevant to his legal specialisation in the Middle East. These have included the UAE chapter of Data Protection & Privacy, 3rd Edition (the Sweet & Maxwell International Series), and the UAE and Saudi Arabia chapters of Proskauer on Privacy.
Nick is admitted in New Zealand, New South Wales and England & Wales, registered with the Legal Affairs Department of the Government of Dubai, and an “Affiliate Member” of the Saudi Bar Association. He is also a Certified Information Privacy Professional (CIPP/E).
Vikram Jeet Singh
Partner and Head of Technology, Media and Communications at BTG Advaya, India
Vikram Jeet Singh is a Partner at BTG Advaya’s New Delhi, and leads the Technology, Media, and Communications practice group. Vikram and is a sector specialist in laws relating to data privacy, digital marketing and advertising, online content, cybersecurity, and video games regulations. He regularly advises clients based out of Silicon Valley, Europe, and Asia on Indian IT laws, particularly in relation to digital business regulations such as the Digital Personal Data Protection Act, 2023. Vikram has featured as a writer and speaker in domestic and overseas conferences on the topics of data privacy laws, video games regulations, and online content laws. Before joining BTG Advaya in 2015, Vikram worked with Unilever India, S&R Associates, and Poovayya & Co. before joining BTG Advaya. He graduated from the National Law School of India University, Bangalore, in 2004.
Nino Tlapak
Partner at DORDA Rechtsanwälte GmbH, Austria
Nino Tlapak joined DORDA’s IT and Data Protection team in 2013 and is a partner since 2021. He focuses on data protection and IT-security law. Further areas of practice include e-commerce and outsourcing. Nino is well known for his data protection activities and also functions as coordinator of DORDA’s data protection unit. In addition, Nino regularly publishes articles in the field of data protection and holds lectures at the Danube-University Krems (Data Protection and Privacy – certified program), the technical colleges FH Technikum Wien and FH Campus Wien as well as the IT-Law LL.M. postgraduate program of the University of Vienna.
Nino studied law at the University of Vienna (Mag iur 2012) and completed the postgraduate programme “Information and Media Law” (LL.M. 2013).
Cécile Théard-Jallu
Partner at De Gaulle Fleurance Avocats Notaires, France
Cécile Théard-Jallu is an expert in innovation digital technologies, cybersecurity and data privacy, healthcare & life sciences and commercial law. She provides strategic assistance to international groups and SMEs on regulatory compliance, data protection & digital law, databases projects, contracts and intellectual property, particularly within the healthcare and life sciences sectors, as well as in the agrifood, retail, mobility and the New Space industries.
Cécile has developed significant expertise in complex contractual operations including R&D, consortiums, technology transfers, and licensing – critical for companies navigating technological transformations with or without public funding. This encompasses advising clients on the engineering, design, negotiation, and implementation of their commercial, computer, technological, or industrial contracts.
She assists clients in developing and implementing innovation strategies encompassing clinical trials, market access, telemedicine, AI, digital twins, primary and secondary use of data schemes, connected devices, blockchain, metaverse, smart cities, and more.
As a certified advisor under the Europrivacy GDPR compliance certification scheme, she represents De Gaulle Fleurance in the Cyber & Security Hub of the European Systematic Paris Region Competitivity Cluster.
Additionally, she has been appointed as an expert in the European Commission’s TEHDaS (Towards the European Health Data Space) programme. Cécile is a member on behalf of her firm of the European Space Agency (ESA)’s agrifood BSGN accelerator and is part of ESA’s new working program on the future European Space Data Space.
Georgia Voudoulaki
Senior Legal Counsel at Robert Bosch, Data Security & Projects, Certified Compliance Officer (Univ.) and Adjunct Professor, Germany
Georgia Voudoulaki is Senior Legal Counsel at Robert Bosch GmbH, certified Compliance Officer (University), and Lecturer. Since 2019, she has been advising Robert Bosch Power Tools GmbH on data protection matters. Since 2022, she has been supporting global digital transformation initiatives at Robert Bosch GmbH, focusing on GDPR compliance, AI governance, and organizational readiness for the EU AI Act, particularly in the context of Human Resources and IT.
Prior to joining Bosch, she worked for several years in leading law firms specializing in commercial and business law.
Georgia studied law at Eberhard Karls University of Tübingen and completed her legal traineeship, inter alia, at the European Commission in Brussels as well as in Thessaloniki, Greece. In parallel with her professional career, she lectured for several years at the Chamber of Industry and Commerce (IHK) Nordschwarzwald. She is currently a Lecturer at the University of Public Administration and Finance Ludwigsburg and at the Baden-Württemberg Cooperative State University (Duale Hochschule Baden-Württemberg) in Stuttgart.
She regularly publishes in professional legal journals and speaks at international conferences on data protection, compliance, and AI governance.
Daniela Will
Data Protection Officer & Head of the Data Protection Unit, München Klinik gGmbH (Munich clinic), Germany
Daniela Will is a Certified Data Protection Officer (TÜV®), Data Protection Auditor DSA-TÜV, GDDcert.EU and Certified Information Privacy Professional/Europe (CIPP/E). She heads the GDD-ERFA-Kreis Bayern as well as the VBW Arbeitskreis Datenschutz and lectures on data protection law at the Hochschule der bayerischen Wirtschaft and the Hochschule Aalen. Daniela draws her knowledge from over 30 years of professional experience in various areas of the IT, automotive and media industries and has many years of in-depth knowledge in the field of data protection.
Since June 2024, she has been the head of the data protection department at München Klinik gGmbH.
Her questions regularly revolve around enabling the potential of patient data in the context of medical research projects.
Michael Will
President of Bavarian Data Protection Authority for the Private Sector, Germany
Michael Will has been appointed President of the State Office for Data Protection Supervision for a period of five years as of February 1, 2020. He was born in Kronach in 1968, is married and the father of one child.
After studying law in Würzburg and completing his legal clerkship in Bamberg, he began his professional career as an administrative lawyer in the service of the Free State of Bavaria in 1995. After moving to the Supreme Building Authority in the Bavarian State Ministry of the Interior in 1997 and to the Bavarian State Chancellery in 2000, Michael Will took over as Head of the Department for Public Safety and Order in the Landshut District Office in 2002. In 2006, he returned to the Bavarian State Ministry of the Interior as an advisor in the field of road law at the Supreme Construction Authority.
In 2009, Michael Will was appointed head of the “Data Protection” department at the Bavarian State Ministry of the Interior for Sport and Integration. He also held the office of official data protection officer there and was a member of the Bavarian State Parliament’s Data Protection Commission. On behalf of the Bundesrat, he accompanied the entire negotiations of a EU-Council Working Party (DAPIX) on the EU General Data Protection Regulation (GDPR) from 2012 to 2015 and also performed the duties of the country observer in the committee pursuant to Article 93 of the GDPR, which is involved, for example, in the adoption of adequacy decisions by the European Commission.