Security and compliance
10 GDPR compliance program experts
These ten privacy professionals have run or helped implement GDPR compliance work inside the organizations they served, several of them as data protection officers. A reader can learn from them how GDPR programs are scoped, staffed and kept running alongside other privacy and data rules.
Professionals to explore
01—10Anna Sewell
LinkedInExperience: Global Data Protection Officer & Head of Governance · Boden
Head of Data Privacy and Compliance at ASOS.com since November 2023, after serving there as Head of Privacy and Data Protection Officer (June–November 2023). Before that she was Global Data Protection Officer & Head of Governance at Boden (2019–2023). Her profile cites a CIPP/E qualification and experience advising clients and colleagues on their obligations under GDPR, including as a manager in Deloitte's Risk Advisory team.
Dr. Réka Adél Kereki (CIPP/E, CIPM)
LinkedInExperience: Corporate Data Protection Officer · TÜV Rheinland Group
Corporate Data Protection Officer at TÜV Rheinland Group since May 2025 and Regional Data Protection Officer WEU & CEE at TÜV Rheinland Europe since 2023, responsible for developing, implementing and maintaining the global data protection management system, coordinating regional DPOs and ensuring compliance with GDPR. She was previously Corporate Data Protection Officer for the Logista Group at Logista (2017–2023).
Helena Vingtoft
LinkedInExperience: Head of GDPR Center of Excellence (Nets) · Nexi Group
Head, Group Privacy Center of Excellence & Data Protection Officer (Nordics) at Nexi Group since May 2025, after serving there as Head, Group Privacy Center of Excellence (2024–2025) and Head of GDPR Center of Excellence (Nets) (2022–2024). She has also been a GDPR Expert with the European Payments Stakeholders Group (EPSG) since 2023, and her profile lists a Director, Group Data Protection Officer (DPO) role at NNIT.
Klaus Alpmann
LinkedInExperience: Vice President - Head of Group Data Protection Data Protection Officer · CARIAD SE - Volkswagen Group
Vice President - Head of Group Data Protection Data Protection Officer at CARIAD SE - Volkswagen Group since July 2019, after serving as Head of Group Data Protection Group Privacy Officer at MAN Energy Solutions SE (Volkswagen Group) (2018–2019) and Data Protection Officer & Legal Counsel at MUNICH RE (2011–2018). His profile cites hands-on expertise in implementing the GDPR, the EU AI Act and the EU Data Act.
Orsolya Schwanner
LinkedInExperience: Data Protection Officer · Aegon
Former Data Protection Officer at Aegon (2020–2022) and Head of Privacy Office at Aegon Hungary Home Savings Company (2019–2022); since October 2022 she has been Attorney, Data protection specialist at Aegon Hungary. Her profile says she was involved in the group-wide GDPR compliance project and headed the Legal and Compliance Department at Aegon Hungary Pension Fund and Aegon Hungary Home Savings and Loan Association between 2010 and 2019.
Roxana-Elena Niculescu
LinkedInExperience: Data Protection Officer DPO CIPM · Bitvavo
Data Protection Officer DPO CIPM at Bitvavo since December 2025, after serving as Vice President Information Security and Privacy Lead at Deutsche Bank (2024–2025) and Global Privacy Program Manager at Morningstar (2022–2024). Her profile describes working with engineers, product managers and executives to translate what GDPR requires into steps they can act on.
Shaun Kavanagh
LinkedInExperience: Data Privacy Contractor - GDPR Implementation · Lloyds Banking Group
Head of Data Privacy and Records Management at Lloyds Banking Group since August 2022, alongside a Data Privacy Contractor - GDPR Implementation role there listed from 2016, in which he scoped and managed the implementation of the GDPR programme for a global financial services organisation. He was previously Privacy Manager at Barclays (2015–2016) and Data Protection Specialist at Friends Life (2011–2015).
Tania Gonzalez Cardona
LinkedInExperience: Data Protection Office GDPR · everis
Held the title Data Protection Office GDPR at everis from December 2017 to April 2025. She has been Data Privacy Manager at NTT DATA Europe & Latam since 2022, where her profile describes her as Head of EMEAL Corporate Privacy, and Global Data Privacy Operations Manager at NTT DATA, Inc. since April 2025.
Tatiana Rassokha, CAMS
LinkedInExperience: Compliance officer · Facephi
Compliance officer at Facephi since February 2024, after serving at Pernod Ricard as Compliance Manager (2021–2023) and Compliance officer Senior Lawyer (2020–2021). Her profile says she led the implementation of a data privacy compliance program aligned with European GDPR and local regulations, including a gaps audit and road map and breach tracking and reporting mechanisms.
Teodora Dorobantu
LinkedInExperience: Privacy and Compliance Manager · Quadient
Privacy and Compliance Manager at Quadient since February 2025, with a focus on GDPR compliance, data protection agreements, privacy policy reviews and privacy operations. She was previously Data protection officer for EMEA Warner Bros Discovery & HBO Max at Concentrix (2021–2025) and Team Leader (HBO Europe) at Webhelp Enterprise (2017–2021).
Choose the right perspective
Match the person's role to your need, since a group data protection officer at a large company, a privacy manager running day-to-day operations and someone who led a one-time GDPR implementation project see the work differently. Also weigh sector, because regulated industries such as banking or insurance add their own expectations.
Questions to take into the conversation
- 01How did you build and maintain the record of processing activities, and who in the business owned each entry?
- 02How do you decide when a DPIA is needed, and what does your review process look like?
- 03How did you set up handling for data subject requests and breaches so deadlines were met consistently?
About this directory
This is a professional research starting point based on business profile data retrieved on . Titles and companies reflect that source snapshot and may describe past or present roles. Check the linked profiles for current details. Inclusion does not imply Instant Expert membership or availability.
Request a correction or removal