Regulatory Compliance, AI, Data Privacy, Cybersecurity, and User Safety Lawyer with 7+ years of experience. Skilled in developing policies and managing cross-functional teams to execute ethics and corporate compliance programs.
Overview
7
7
years of professional experience
Work History
Regulatory Compliance, Government Affairs, and Privacy Counsel
Nextdoor
12.2024 - Current
Design process, risk assessment, controls, and systems to ensure company's regulatory adherence with AI, data privacy, online safety, and consumer protection regulations.
Support executive advisory sessions and workshops to inform enterprise online safety and AI regulatory frameworks to mitigate safety risks and ensure legal adherence.
Spearhead constructive legislative engagement strategy for relevant laws to advocate for a risk-based approach, minimize legal cost, and enable innovation.
Policy Compliance Manager
Spotify
06.2021 - 12.2024
Spearheaded, implemented, and managed systems, processes, and policies to ensure Spotify's compliance with the EU AI Act, Digital Services Act (DSA), UK Online Safety Bill, and online governance regulations in Latin America.
Drove, along with Spotify's Government Affairs team, influencing new privacy, artificial intelligence, and user safety regulations through legislative advocacy campaigns.
Led cross-functional teams in conducting product trust assessments and enabling over 20 successful product launches through effective risk mitigation strategies.
Drafted and integrated enterprise user communication into the workflow to uphold data subject rights, delivered comprehensive information about company content moderation decisions, and established an appeal mechanism.
Legal Advisor
Access Now
12.2020 - 06.2021
Advised internal teams on economic sanctions and their impact on technological device donations.
Led cross-functional teams to embed Privacy by Design (PbD) principles to mitigate against high-risk activities; conducted Records of Processing Activities (ROPAs), cookie audits, and Data Protection Impact Assessments (DPIA).
Spearheaded the General Data Protection Regulation (GDPR) initiative, enhancing efficiency in regulatory risk management, internal controls, and monitoring procedures for operations exceeding USD$14 million.
Created, managed, and addressed DSAR processes for all global Access Now users reducing regulatory risk by 85%.
Privacy Counsel
MongoDB
04.2020 - 11.2020
Advised on cybersecurity incidents by evaluating regulatory risks, identifying notification obligations, drafting communications, and collaborating with cross-functional teams to address root causes.
Managed privacy compliance programs for California Consumer Privacy Act (CCPA), Brazil Data Protection Regulation (LGPD), and GDPR.
Spearheaded Schrems II due diligence and devised new supplementary measures for data transfer to enhance data protection, including encryption, pseudonymization, and tailored contractual clauses that specifically address government access to data. Reduced client inquiries by 60%.
Vice President Data Privacy
Bank of New York Mellon
07.2018 - 03.2020
Drove privacy governance frameworks to manage data use, including developing data privacy inventories for 4.45+ billion business to achieve compliance with Personal Information Protection and Electronic Document (PIPEDA), LGPD and CCPA.
Advised the project and sales team on the deployment of an AI fraud detection product, integrating principles of data minimization and conducting data protection impact assessments and mitigated exposure to biometric privacy laws by 80%.
Advanced enterprise risk management by creating data privacy M&A due diligence into a company-wide M&A process to ensure that BNY Mellon mitigated data privacy risks prior to purchasing new business units.
Trained over 200+ stakeholders on data privacy obligations.
Education
LLM - European Union Law
UNIVERSITE PARIS II PANTHEON- ASSAS
Paris, France
05.2017
Juris Doctor - Law
FORDHAM UNIVERSITY SCHOOL OF LAW
New York, NY
05.2017
Bachelor's - Political Science
BARUCH COLLEGE, CITY UNIVERSITY OF NEW YORK
New York, NY
05.2008
Skills
CIPP/EU/US/C
Regulatory compliance
Privacy by design
Data governance
CIPP/AIGP (expected August)
Data Privacy
AI Governance
Leadership Experience
Women.NYC, Mentor
America Needs You, Mentor Coach
IAPP, Member
Timeline
Regulatory Compliance, Government Affairs, and Privacy Counsel