LGLNOW is my platform for sharing practical insights and professional learning in data governance and digital trust. This page describes the experience and approach behind the platform.
Data Governance & Digital Trust
I work at the intersection of law, technology and organizational governance, helping turn complex obligations into trusted operating systems.
My professional focus brings together five connected disciplines: data protection and privacy, data governance, cybersecurity compliance, responsible AI, and digital accessibility. I approach them not as separate compliance programs, but as components of a wider Data Trust system—one that enables responsible decisions, protects rights, and provides reliable evidence of how an organization operates.
Building trust through integrated governance
Organizations increasingly depend on data, digital platforms and automated technologies. At the same time, they must respond to expanding legal obligations, security risks, ethical expectations and public scrutiny.
These responsibilities are frequently divided between legal, cybersecurity, technology, data, risk and business teams. Each may develop its own policies, assessments, controls and reporting mechanisms. Although specialization is necessary, fragmentation can create duplicated effort, inconsistent decisions, unclear accountability and gaps between written requirements and operational reality.
My work focuses on connecting these responsibilities.
I help translate laws, standards, contractual commitments and organizational priorities into governance structures that people can understand and operate. This includes defining accountability, designing control frameworks, integrating risk and assessment processes, establishing evidence requirements and creating mechanisms for assurance and continuous improvement.
The objective is not simply to demonstrate compliance. It is to make responsible action easier and to strengthen confidence in how data and digital technologies are governed.
My current professional focus
Within a global media organization, I lead an integrated portfolio spanning:
- Data protection and privacy
- Data governance
- Cybersecurity compliance
- Responsible AI
- Digital accessibility
Operating in a multinational media environment creates a distinctive governance challenge. Data and technology support journalism, content production, digital distribution, audience engagement and corporate operations across jurisdictions, languages and platforms.
Governance in this environment must protect individual rights and organizational interests while remaining sensitive to editorial independence, public-interest responsibilities, operational resilience and the safety of people working in complex circumstances.
My role is to help create the structures through which these different considerations can be evaluated consistently. This involves connecting legal interpretation, technology risk, business processes, control design, assurance, and organizational decision-making.
A multidisciplinary professional journey
My perspective has developed through work across consulting, law, technology, project delivery and enterprise governance.
Earlier in my career, I gained professional experience with McKinsey and Deloitte. That experience strengthened my understanding of structured problem-solving, organizational transformation and the importance of connecting strategy with execution.
My subsequent work has increasingly concentrated on data-related rights, risks and organizational responsibilities. Over time, this developed into an integrated Data GRC practice encompassing privacy operations, governance, cybersecurity compliance and assurance. As the digital environment evolved, that scope expanded to include responsible AI and digital accessibility.
This progression reflects a consistent theme in my work: new obligations should not automatically produce new governance silos. Wherever possible, organizations should build on shared foundations of accountability, risk, control, evidence and improvement.
Law, technology and business
My academic background combines three perspectives that shape how I approach Data Trust.
Law
A Juris Doctor supports my understanding of legal reasoning, rights, obligations, interpretation and accountability. It helps me examine not only what a rule says, but how it applies within a particular factual, technical and organizational context.
Technology
A bachelor’s degree in Computer Science provides a foundation for understanding information systems, software, data flows and technology architecture. This helps bridge the gap between regulatory language and the systems through which data is actually collected, used, shared, retained and protected.
Business and Execution
An MBA in Project Management and a PMP certification provide the organizational and delivery perspective needed to turn requirements into sustainable operating practices. Governance succeeds only when responsibilities, resources, processes and measures are integrated into the way an organization works.
Together, these disciplines allow me to approach Data Trust as a legal, technical and organizational challenge rather than as a narrowly defined compliance exercise.
How I approach governance
My approach begins by understanding the organization, its mission, its operating environment, and the people who may be affected by its decisions.
From there, I connect five elements:
- Obligations — the laws, standards, contracts, policies and commitments the organization must address.
- Risks — the potential effects on people, operations, information, technology and organizational objectives.
- Accountability — the people and governance bodies responsible for decisions, oversight and action.
- Controls — the measures through which requirements and risk decisions are put into practice.
- Evidence — the information needed to demonstrate that responsibilities and controls are operating effectively.
This creates a traceable path from an external or internal obligation to the organizational evidence that supports assurance.
It also makes governance more adaptable. When a law, technology, or risk changes, the organization can identify the affected requirements, controls, owners, and evidence instead of rebuilding the program from the beginning.
Principles that guide my work
Architecture before paperwork
Policies and procedures are important, but they should describe a coherent governance system. I begin with accountability, decisions, processes, information flows and control relationships before deciding which documents are required.
Evidence over assertion
A policy statement does not establish that a control operates. Effective governance requires reliable evidence that responsibilities have been understood, decisions have been made and controls have performed as intended.
Proportionate by design
Not every activity presents the same risk or requires the same level of control. Governance should respond to context, scale, sensitivity, potential impact and the rights of affected people.
Rights and mission together
Protecting individual rights and enabling legitimate organizational objectives should not be treated as opposing goals. Good governance seeks approaches that respect both.
Integration where it creates value
Privacy, data governance, cybersecurity, AI and accessibility have specialist requirements, but they also depend on common capabilities. Shared accountability, risk, controls and evidence can reduce duplication without removing necessary expertise.
Continuous improvement
Data Trust is not a one-time project. Governance systems must learn from incidents, assessments, audits, regulatory developments, technology changes and the experience of the people who operate them.
Areas of expertise
My work and research currently focus on:
- Data protection operating models and privacy management
- Enterprise data governance and information accountability
- Cybersecurity control compliance and assurance
- Integrated governance, risk and control frameworks
- Responsible AI governance and oversight
- Digital accessibility governance
- Data classification, cataloguing and lifecycle management
- Third-party and technology supply-chain governance
- Regulatory traceability and control mapping
- Evidence-based compliance and internal assurance
- Governance for multinational media and digital environments
- Translating legal obligations into operational requirements
Selected work and professional insights
This site presents selected examples of my professional approach at a public and non-confidential level. The case studies focus on governance challenges, methods and transferable lessons rather than internal organizational details.
I also publish practical analysis on privacy, data governance, cybersecurity compliance, responsible AI, accessibility, digital regulation and the architecture of Data Trust.
Connect with me
I welcome professional conversations with governance leaders, practitioners, researchers, auditors, legal and technology professionals, and conference or training organizers working to advance trustworthy data and digital systems.
Professional disclaimer
LGLNOW is my independent professional and educational platform. Views expressed are my own and do not represent the views of any current or former organization with which I have been associated.
Content is provided for professional and educational purposes and does not constitute legal advice. References to professional work are presented at a general, public, and non-confidential level.