Teaching team

ECPC teaching staff

cosimo monda

Cosimo Monda is the Director of the European Centre on Privacy and Cybersecurity (ECPC) at the Faculty of Law. His work has a strong European and international outlook in the field of privacy and cybersecurity, steering an interdisciplinary group of researchers, academics and professionals. His fields of expertise include Data Protection, Privacy and Cybersecurity, EU Information Management; Transparency and access to documents; EU Agencies; EU decision-making procedures and Institutions and EU law. He has published various articles on these issues and is an internationally-recognised public speaker and lecturer.

Teresa

Teresa Quintel is an Assistant Professor at the Maastricht European Centre on Privacy and Cybersecurity, which she joined in July 2021.Prior to her appointment, Teresa worked at the University of Luxembourg and Uppsala University as PhD candidate, where she was also engaged in teaching and moot court activities.
Apart from her research and teaching activities, Teresa worked in different projects on EU and Council of Europe level. In the framework of the Council of Europe's Glacy+ project, Teresa participated as external expert in data protection legislation drafting workshops in Nigeria and Namibia and worked on a toolkit for legal practicioners in response to human rights violations in extraordinary circumstances. Teresa further contributed to Impact Assessments on data protection related issues. In addition, she was a key data protection expert for PICUM, at the EJTN, Complianza Sweden and as part of the panel of experts of the Digital Freedom Fund.

Paolo Balboni

Paolo Balboni is Professor of Privacy, Cybersecurity, and IT Contract Law at Maastricht University, and Founding Partner of ICT Legal Consulting (ICTLC).
ICT Legal Consulting is a law firm with offices in Milan, Bologna, Rome, an International Desk in Amsterdam, and multiple Partner Law Firms around the world. Together with his team, he provides legal counsel across Europe to multinational companies specializing in the fields of Personal Data Protection, Data Security, ICT, and Intellectual Property Law. Dr. Balboni is the President of the European Privacy Association based in Brussels, the Cloud Computing Sector Director and Responsible for Foreign Affairs at the Italian Institute for Privacy in Rome, Italy. Balboni is actively involved in European Commission studies on new technologies and is a regularly invited expert in the revision of the EU Commission proposal for a General Data Protection Regulation. He co-chairs the Privacy Level Agreement (PLA) Working Group of Cloud Security Alliance and has acted as the legal counsel for the European Network and Information Security Agency (ENISA) projects on ‘Cloud Computing Risk Assessment’, ‘Security and Resilience in Governmental Clouds’, and ‘Procure Secure: A guide to monitoring of security service levels in cloud contracts’. He is Lecturer at the Master in Digital Media Management at the European Institute of Design and Research Associate at Tilburg University. He obtained his Law Degree with distinction from the University of Bologna in 2002 and a Ph.D. in Comparative ICT Law from Tilburg University in 2008. In 2018 he was appointed as professor at the Faculty of Law, Maastricht University.

Andreea

Andreea Lisievici is a privacy lawyer originally from Romania but based in Sweden, and working with EU data protection matters and their effects globally. She has worked as an outside counsel for most of her career, having advised on data protection matters since the very early stages of cloud computing emergence. She switched to leading in-house roles in 2019 - working for Volvo Cars and then Boeing, seeing the data protection compliance world both as a controller and as a processor in some very challenging projects. She is well accustomed to technical areas like online tracking, mobile apps, data analytics, connected devices and internet of things, but also keeps strong roots in the general theory of EU law and the global institutional context in which the European legal order fits. 

Valentina Zecchi

Valentina Zecchi is a Lecturer at the European Centre on Privacy and Cybersecurity (ECPC) and the Coordinator of Global Privacy Officer Certification (ECPC-G), positions she assumed in September 2023. Before joining the ECPC, Valentina worked as a Data Protection Officer for an Italian digital marketing company for several years, where she gained extensive expertise in resolving practical data protection challenges. Her background also includes valuable experience as an external legal counsel, specializing in commercial law, consumer law, and data protection law. In this capacity, she assisted various companies with the implementation of the General Data Protection Regulation (GDPR). 

Beyond her professional pursuits, Valentina is deeply committed to addressing gender disparities. She is the co-founder of 'Privacy She-Leaders,' an Italian association of professionals dedicated to promoting female leadership in technology and data protection.

Teaching staff ECPC-G

Module "0": International Data Protection Legal Framework

Gabriela

Dr. Gabriela Zanfir-Fortuna is Vice President for Global Privacy for the Washington DC-based Future of Privacy Forum, where she leads the work on Global privacy and data protection developments, coordinating FPF's offices in Brussels, Tel Aviv and Singapore. She is also an Associated Researcher for the LSTS Center of Vrije Universiteit Brussel. Gabriela has experience in working for the European Data Protection Supervisor in Brussels and contributed to the work of the Article 29 Working Party. She holds a PhD in law with a thesis on the rights of the data subjects, and an LLM in Human Rights. She published a comprehensive volume on the rights of the data subjects (C.H. Beck, Bucharest, 2015), and is one of the co-authors of "GDPR: A commentary" (OUP, 2020). In 2023, she received the Stefano Rodota Award of the Council of Europe.

ECPC

Christopher Docksey, Honorary Director General of the European data protection Supervisor (EDPS)

He has been responsible for the coordination and implementation of policies and activities since 2010. He is a member of the English Bar and a law graduate of the Universities of Cambridge and Virginia. He has taught law at the Universities of Exeter and Washington and at the Marshall-Wythe School of Law. He was the Legal Adviser on data protection to the European Commission from 2001 to 2010. During this period he represented the Commission in the data protection cases before the European Court of Justice and advised on draft legislation and international negotiations on matters such as Safe Harbor, PNR and TFTP. Most recently he represented the EDPS in the Schrems proceedings before the Court.

Paul Breitbarth

Paul Breitbarth is a data protection lawyer from the Netherlands. He currently works for Catawiki, Europe’s leading online platform for special objects, as Data Protection Lead. In addition, Paul works as Senior Visiting Fellow at Maastricht University’s European Centre on Privacy and Cybersecurity, and serves as Member of the Jersey Data Protection Authority and of the Data Protection Board of the European Patent Office. He is a regular speaker on webinars and at conferences, and co-hosts the Serious Privacy podcast. 

Previously, Paul worked both in the public and private sector in multiple privacy roles, including at TrustArc, Nymity and the Dutch Data Protection Authority. He was an active member of various Article 29 Working Party subgroups, co-authoring opinions on the data protection reform, surveillance, the Privacy Shield and others. In 2015, he organised the International Privacy Conference in Amsterdam. Paul holds a Master of Laws from Maastricht University in the Netherlands.

Module 1: US

Liana

Liana Chen is a partner at Kronenberger Rosenfeld LLP, focusing on privacy and digital advertising matters. As an attorney based in California, she advises businesses on US regulatory compliance, including under federal standards, such as Federal Trade Commission (FTC) rules and guidelines, and state privacy laws, such as the California Consumer Privacy Act (CCPA)/California Privacy Rights Act (CPRA). Liana regularly assists clients navigating complex data protection and cybersecurity laws in a global economy, including by building privacy programs and drafting legal contracts. Liana also defends companies that are investigated or sued by the FTC or other government regulators. She is well-versed on privacy issues involving marketing, technology, financial offers, social media, health and insurance, biometrics, unauthorized access and security breaches, wiretap laws, and data brokering and selling; and her experience spans the Children’s Online Privacy Protection Act (COPPA), Gramm-Leach-Bliley Act (GLBA), related Safeguards and Privacy Rules, Stored Communications Act (SCA), and Electronic Communications Privacy Act (ECPA).

Liana earned her B.A., summa cum laude, from UC San Diego and J.D., with high honors, from George Washington University Law School. For over a decade, she has taught and moderated various courses to both law students and attorneys. She has litigated in state and federal courts across the US. She is also an active member of the International Association of Privacy Professionals (IAPP) and Internet Law Leadership Summit (ILLS); and she served on the Executive Committee of the Bar Association of San Francisco (Barristers, Litigation). Previously, Liana handled FTC and data privacy cases at an international law firm in Washington, DC.

jeewon

Jeewon Kim Serrato is partner in the San Francisco, co-lead of the Digital Transformation and Data Economy team and co-lead of the U.S. Consumer Privacy practice at BakerHostetler. Her practice focuses on guiding organizations through periods of transformation and change, whether it is driven by innovation or crisis management. She counsels clients in the areas of consumer privacy, cybersecurity, data optimization and data science.

Before joining Baker, Jeewon served as Legislative Counsel for the US House of Representatives in Washington, DC, and as head privacy executive for two public companies, a global data broker and a major financial services institution with $3.5 trillion in assets. Jeewon advises C-suite level executives on the impact that critical business events involving technology and data can have on the customers, employees and the bottom line. Jeewon helps design and execute compliance programs for international corporations, as well as negotiate cross-border M&A deals, and advise on high-stakes investigation and dispute matters. She has a thorough understanding of U.S. and global privacy regulations, including the California Consumer Privacy Act (CCPA) and the EU General Data Protection Regulation (GDPR). Most recently, Jeewon represented Sephora in the first-ever CCPA settlement with the California Department of Justice. 

Jeewon formerly served on the U.S. Department of Homeland Security Data Privacy and Integrity Advisory Committee and as Inaugural Chair of the California Lawyers Association’s Privacy Law Section Executive Committee. She is co-author of the International Association of Privacy Professionals (IAPP) publication, Data Processing Agreements: Coordination, Drafting and Negotiation (2019) and the “International Personal Data Protection and Cross-Border Data Transfers” chapter of Privacy Compliance and Litigation in California (2021), a publication of the Continuing Education of the Bar (CEB), a non-profit program of the University of California.

Jeewon earned her B.A. from UC Berkeley, a J.D. with UC Berkeley School of Law, and a Certificate with Honors from the International Program of Political Science and Social Sciences from Institut d'Etudes Politiques de Paris.

Jessica Robinson Hanna

Jessica Robinson Hanna advises health and life sciences industry clients on a wide range of regulatory and transactional matters. Her clients include health care providers, pharmaceutical, biotechnology, and medical device manufacturers, managed care plans, and professional and trade associations. Jessica manages health regulatory due diligence, and her extensive experience in this area allows her to quickly and efficiently identify risks, and to offer clients insights into best practices and emerging trends.

Jessica’s experience carries beyond diligence; she regularly advises clients on post-close integration issues, including establishing, implementing, and improving compliance programs. Well versed in health privacy law, she helps clients navigate a range of complex health data issues under the Health Insurance Portability and Accountability Act (HIPAA) and other U.S. laws. In particular Jessica advises pharmaceutical companies on health privacy considerations related to patient support programs, consents, and clinical trials. 

Further, Jessica is experienced in developing statutory and regulatory advocacy strategies, including drafting legislative and regulatory reforms and advising on the interaction of proposed reforms with existing legal frameworks. Prior to law school, Jessica worked in the Massachusetts state legislature and in the U.S. Congress, which provide her with a deep understanding of regulatory schemes at the state and federal level.

Module 2: Brazil

Domingos

Domingos Farinho is an Assistant Professor at the University of Lisbon School of Law. He is also a Senior Fellow of the Lisbon Public Law research centre where he coordinates the Lisbon Digital Rights and Freedoms research group. His main areas of research are Administrative Law (especially EU Regulatory Law), Fundamental Rights (mainly Privacy and Data Protection), and Legal Theory. He is also a legal consultant working in the field of TMT and digital public law. He has been especially interested in fundamental rights in the context of Public Administrations and Cyberspace. He has coordinated and participated in several courses regarding Data Protection, the GDPR and access to State-held information.

Miriam

Miriam Wimmer is a member of the first Board of Directors of the Brazilian National Data Protection Authority, ANPD. She holds a PhD degree in Communications from the University of Brasilia, and a Master degree in Public Law from the State University of Rio de Janeiro. She is also a Professor at the Law School of IDP, in Brasília, and guest lecturer on digital law and personal data protection at several other educational institutions. As a professional civil servant since 2007, she has held senior positions in different public bodies in Brazil, such as the national telecommunications regulator, the Ministry of Science and Technology, and the Ministry of Communications. She has been involved in policy discussions concerning personal data protection since 2011, and had an active role throughout the entire process of drafting and approval of the Brazilian legislation currently in force.

Module 3: Kenya

Amit

Amit Gadhia is an experienced and dual qualified data protection lawyer with over 24 years of legal practice in Kenya. Amit has advised organisations of all sizes on Data Protection compliance requirements under the Kenya Data Protection Act, 2019 (DPA) and General Data Protection Regulation (GPDR).
Amit’s recent major assignments and experience include conducting a Data Protection Impact Assessment for a major infrastructure project in Kenya and advising them on various aspects of data protection; being part of a team for Data Protection compliance project for a national airline with international operations, specifically assisting on data mapping and inventory, privacy by design and staff training; advising a national supermarket chain in Kenya on their Data Protection compliance requirements and registration with the Office of the Data Protection Commissioner and being a data protection consultant with a leading regional audit and assurance, tax and outsourcing provider across East Africa.
Amit’s qualifications and credentials include Advocate of the High Court of Kenya, Solicitors of the Senior Courts of England and Wales, Certified Privacy Engineer (foundation level - Data Protocol), OneTrust Fellow of Privacy Technology, Certified Privacy International Professional (CIPP/E) an an LL.B. (Hons) title from the Cardiff University, Wales, UK.

Rose Mosero

Rose Mosero, HSC, FIP is the Deputy Data Commissioner- Compliance at the Office of the Data Protection Commissioner, Kenya.  Prior to taking up that position, Rose also served as the Legal, Policy and Regulatory Advisor to the Cabinet Secretary in the then, Ministry of ICT, Innovation and Youth Affairs, and as an advisor to the Data Commissioner (secondment) and technical lead on data protection.

Rose is a dually registered lawyer having been admitted as an Australian Legal Practitioner and an Advocate of the High Court of Kenya. Rose is also a Fellow of Information Privacy having been conferred that designation by the International Association of Privacy Professionals in recognition of her expertise in the field of Privacy and Data Protection. Rose also serves as an advisory board member at the International Association of Privacy Professionals.

Rose received a Head of State Commendation (HSC) from H.E. The President of the Republic of Kenya in recognition of her contribution to Kenya's ICT Regulatory and Policy frameworks, including Digital Economy and Data Protection.

Module 4: Canada

Kirsten

Kirsten Thompson is a partner and the national lead of Dentons’ Privacy and Cybersecurity group. She has both an advisory and advocacy practice, and provides privacy, data security and data management advice to clients in a wide variety of industries.

Kirsten’s practice has a particular concentration in data-driven industries and disruptive technologies, and she is a leading practitioner in areas such as Fintech (including blockchain and "smart contracts"), digital identity, Open Data/Open Banking, vehicle telematics and connected infrastructure, Big Data/data analytics applications and enterprise data strategy. She also helps clients prepare for and manage information crises, such as data breaches, investigations and class actions, and has advised financial institutions, insurers, health care providers and providers of critical infrastructure on cybersecurity preparedness and response planning. She has been lead Canadian counsel on some of the largest North American data breaches and has been selected as preferred cybersecurity counsel by a number of Canada’s leading financial institutions and insurance providers.

Anca

Anca Sattler is Senior Associate General Counsel at Global Payments, Inc., a global fintech company based in Atlanta, GA. Anca’s responsibility is leading privacy and data protection compliance, primarily for Europe and Canada. Prior to joining Global Payments, Anca was in private practice where she focused on privacy, data protection and international trade as part of Dentons Canada, a large multinational law firm. In her capacity as counsel, Anca represented large multinational companies in their privacy and trade-related matters and acted as external Data Protection Officer for various businesses operating in Europe. Anca earned her J.D., cum laude, from the University of Ottawa where she specialized in international law and is certified by the International Association of Privacy Professionals in both European privacy law (CIPP/E) and Canadian privacy law (CIPP/C). Currently, Anca is pursuing an Advanced Masters' Degree with the Maastricht European Centre on Privacy and Cybersecurity. 

Module 5: India

Sajai

Sajai Singh is the Co-Chair of the Firm’s Corporate Practice. His practice focuses primarily on compliance with particular emphasis on cross-border issues. He is an acclaimed compliance lawyer with more than 32 years of experience representing a wide variety of industries, businesses and sectors. He started his career as a litigator, litigating labour and employment matters. Thereafter, he moved to transactional and compliance work. This wealth of experience means that he understands complex compliance issues that arise in major transactions and can provide practical solutions to resolve these issues; providing advice that goes well beyond legal and contractual matters, and into the technical and commercial heart of the success of the transaction. In terms of sectors, Sajai maintains an active practice in the Knowledge based industries sectors. He is known as a pioneering lawyer supporting the development of the Information Technology sector in India. Sajai has mapped the development of technology law in India and is today an expert in cyber security and data privacy matters in India. He is on the breach response teams of various international organizations, including insurance companies. He regularly publishes and speaks on a variety of legal, regulatory and compliance related topics, specially focused on cross-border trade. Sajai is passionate about education, and regularly conducts client education seminars, executive education programs and boot camps for young lawyers. The Cyberspace Camp ™ program is one such program he has patronized and promoted in several developing nations. Sajai is the Past President of ITechLaw, the International Technology Lawyers Association, headquartered in the US. This is a first for any Asian.

Rahul

Rahul Rajpal focuses on corporate commercial, regulatory and policy matters in various sectors. He regularly advises a wide variety of domestic and foreign clients on all aspects of Information Technology laws including data protection, data transfer, intermediary liability, cyber security government access requests, data retention, e-commerce compliances, and gaming laws. He has also counselled clients on how to report data breaches to Indian regulators and assist clients to file data breach reporting documentations with regulators. He has regularly assisted clients with a wide manner of commercial contracts, including intellectual property assignment/licensing agreements, master service agreements, distribution/reseller contracts and franchising contracts, software and app development contracts. He also provides regulatory advice on telecom and related laws involving telecom companies or other service providers. He has also been involved in corporate transactions including cross-border mergers and acquisitions where he advised on transactional and commercial aspects of structuring, entry strategies, contract negotiation and foreign exchange regulations.

Module 6: Japan

Daniel

Daniel Schwarz is an IT System Engineer and Entrepreneur in Tokyo with over 15 years of experience in the field. 

He holds a degree in Computer Science - System Integration and has a strong background in Data Ethics and Data Privacy. In addition to his work as Founder and CEO of ITD-GBS Tokyo, Daniel is also active in the broader IT community in Japan. He is the chairman of the IT roundtable at the German Chamber of Commerce and Industry, and has served as a guest speaker at events organized by the EU Delegation in Tokyo and the Japanese Privacy Commission. He is also the creator of Mobyl, a plug and play IT solution, which was has been recognized as social change maker by the Nippon Foundation in Japan.

Daniel is known for his dedication to using technology for social good, and has developed an edX course on AI and data ethics in collaboration with the Tokyo Institute of Technology, and is frequently invited to speak on topics related to technology and privacy. With his expertise and passion for making a positive impact, Daniel is a valuable asset to the IT community in Japan.

Tobias

Tobias Schiebe is a qualified German lawyer, Certified Data Privacy Professional (CIPP/E) and Registered Foreign Attorney in Japan. Tobias is based since 10 years in Tokyo. He regularly deals in his legal practice in Japan with data protection and data privacy issues, in particular in a multinational cross-border context, advising clients from a wide range of industries, such as IT, E-Commerce, Consumer Goods and Mobility.

Tobias’s academic background and legal training in Europe and the Asia-Pacific Region includes work experience in a Japanese law firm in Tokyo, the largest trade union in New Zealand and the Hamburg office of an Anglo-American law firm.

Tobias is a frequent speaker at seminars and trainings for business people in Japan and Europe. In March 2021, Tobias co-established in Japan the service “unwyr” in cooperation with IT-Deutschland Global Solutions K.K. to seamlessly provide IT and legal services with regard to data protection compliance.

Module 7: Australia and New Zealand

Chloe

Chloe Hatzis is internationally experienced at implementing information security in business operations. She has an LLB (Hons) and a decade of experience in business operations, cyber security strategy, international privacy and data protection, information security management, corporate governance, and cyberlaw training for executive level management. 

Her unique skill-set enables her to bridge the gap between implementing law, technology, business process and security to empower individuals and organisations to make informed decisions about their information.

Chloe is the Company Secretary for the Australian Information Security Association (AISA) and has been active in the AISA community since 2018, previously holding the position of Deputy Branch Chair for the Melbourne Executive Committee.

Helaine

Helaine Leggat is an internationally recognised lawyer and one of a few in the world with this unique set of skills linked to over 20 years of hands-on experience. Her core belief is that personal data is the most important kind of information that there is in the world today - tantamount to national security. All her work involves some aspect of privacy and data protection compliance, risk, ethics, and security.

She has considerable international experience across banking, insurance, resources, emergency services, defence, education, health, utilities, retail, logistics, personal data protection, governance, telecommunications and emerging technologies, often working with large teams to implement technology solutions.

Helaine is the author of numerous publications in Australia and internationally on the application of national legal systems to cyberspace, privacy and data protection, surveillance, ethics, and information/hybrid warfare. Helaine regularly presents at international conferences and has been actively engaged in teaching and knowledge transfer for government, the private sector and academia for many years.

Helaine graduated in Law at the University of South Africa in 1990 and completed the transfer of her degree to practice in Australia through the University of Sydney in 2016.

Module 8: China

Arlene Zhang

Arlene Zhang is an experienced data protection and privacy compliance expert from China. She is familiar with data privacy protection laws and regulations both domestic and overseas, including Personal Information Protection, Data Security, Cybersecurity, GDPR and CPRA etc.

Based on her software development experience, she works with Business and R&D, Product and Security teams to covert legal requirements into technical and process solutions and implement them in a closed loop to fulfil the Privacy by Design.

She specializes in privacy consulting, providing privacy impact assessments, Privacy by Design UX design guidelines, cross-border data transfer, and AI model evaluations to product teams. She has a successful track record of developing and implementing privacy compliance systems for global technology companies

Joao Barreiro

Based in London, João Barreiro is a qualified lawyer and currently the Chief Privacy Officer of BeiGene, a biopharmaceutical company with 10,000 employees listed on the NASDAQ, Hong Kong and Shanghai stock exchanges. He leads a team of experts in privacy, digital data laws and AI, across US, China and Europe. He was recognized as the 2022 Privacy Executive of the Year by the PICCASO Privacy Awards for his outstanding work at BeiGene.

Some of the highlights of his career include:

  • Former global Chief Privacy Officer of HCL Technologies and Willis Towers Watson
  • Past privacy positions at the European Medicines Agency, IBM, and Celgene (BMS)
  • Co-author of several publications, including the book "Privacy Program Management", the main training material for the IAPP CIPP/M certifications, and “The Role of Privacy in ESG Explained”
  • International Association of Privacy Professionals (IAPP) Research Advisory Board and European Advisory Board
  • UK's Government International Data Transfers Expert Council
  • Consultative Expert on Digital Ethics at the European Insurance and Occupational Pensions Authority (EIOPA)
  • Board of Directors of the International Pharmaceutical & Medical Device Privacy Consortium (IPMPC)

Optional Module: United Kingdom

Ellis

Ellis Parry was appointed in November 2019 as the ICO’s first Data Ethics Adviser, responsible for articulating the regulator’s view of the interplay between the inherently ethical principles of the GDPR and the emerging field of data ethics.

Prior to his engagement at the ICO, Ellis was the Global Lead for Data Privacy at BP, responsible for maintaining its personal data international transfer mechanism (Binding Corporate Rules) and designing its GDPR global compliance programme. Before BP, Ellis was Global Privacy Counsel at AstraZeneca where negotiating the relationship between medical research ethics and the data protection principles was a regular and constant feature of his practice.

Ellis’ experience encompasses all aspects of information rights law with a particular focus and interest on lawful and ethical collection, transfer and sharing of data where the deployment of AI and machine learning can give rise to some of the greatest risks and benefits to society. Ellis is a solicitor with 22 years' PQE, an MBA and is a contributing author to Sweet & Maxwell's "Data Protection Law & Practice" 4th and 5th ed as well as its standalone guide to the GDPR. He serves as an EU Advisory Board Member for the International Association of Privacy Professionals and on the British Medical Journal’s AI in Healthcare. Ellis now runs his own legal consultancy, Data Privacy Compliance Solutions Ltd.

Tash

Tash Whitaker started her career managing master data, implementing governance and  protecting data privacy in the days when Mark Zuckerberg was still writing BASIC on his Atari and GDPR was not yet a four letter word.  With over 20 years of experience with Dun & Bradstreet, Cisco and Moorcrofts LLP, Tash now uses her knowledge and experience to guide organisations through their data protection journey, offering consultancy, advice, and training, as well as data protection as a service.

Tash has a reputation for making the impossible seem simple and turning regulatory legalese into something that can be understood and implemented by all. She is direct, to the point,  and importantly, gets things done. 

A life changing accident six years ago has done nothing to subdue her passion for all things data but has left her with the belief that we can't do things alone, and we should do our upmost to support others.* With a sound educational background (BA (Hons) CIPP/E, CIPM, FIP, PGCert in Information Governance & Data Protection Law, as well as a DPO certification from Maastricht University, Faculty of Law), Tash shares her thought leadership by speaking at conferences, industry forums and learns from her extensive LinkedIn network of like-minded professionals.

 *It has also left her with a Harry Potter scar, which makes her easy to recognise at networking events!

Optional Module: Data Security Management and International Standards

Yazan Al-Masri

Yazan Al-Masri is a renowned Cybersecurity and Privacy advisor, helping organizations develop an effective Information security and Privacy Programs. Yazan is a regular teacher in Maastricht University's Advanced Master in Privacy, Cybersecurity and Data Management. He holds a Masters Degree in Information Security and Digital Criminology with 25 years of international level experience in Information Security, Data Privacy, Business Continuity & Risk Management, IT Service Management, IT Infrastructure and Project Management. He has a proven track record of implementing complex cross-functional IT Security strategic initiatives, Network Infrastructure as well as IT service Support/delivery strategies to support corporate mandate.

Programme Management

Joyce Groneschild

Joyce Groneschild is the Deputy-Director of the European Centre on Privacy and Cybersecurity (ECPC) at the Faculty of Law. Joyce is a strategic marketing specialist with a strong focus on value co-creation. She has a longstanding experience in running executive education programmes for professionals, managing large projects and developing executive programmes to fit organisations’ needs globally.