Data Protection & Privacy

Privacy programmes, data governance and cross-border data obligations.

Introduction

Privacy and data protection govern how organisations collect, use and share personal data — and how they demonstrate accountability for it.

With AI and analytics expanding what data can do, privacy professionals are increasingly asked not only “is it lawful?” but “is it right, and can we prove it?”

Governance

Accountability, the role of the data protection officer and board reporting.

Controls

Records of processing, privacy by design and access controls.

Risk

Data protection impact assessments and breach risk.

Compliance

Lawful bases, data-subject rights and international transfers.

Sub-themes

The topics this pillar covers in its events, articles and working groups.

Privacy programme management

Governance, policies and metrics for privacy.

Impact assessments

DPIAs that change design decisions.

International data transfers

Transfer mechanisms and risk assessments.

Data-subject rights

Handling requests at scale and on time.

Breach management

Detection, assessment and notification.

Data governance & retention

Knowing what data you hold and why.

Privacy in AI & analytics

Training data, profiling and transparency.

Privacy assurance

Audits and testing of privacy controls.

Regulatory watch

The frameworks and regulation we track for this pillar. Updates are published as Insights.

Europe

General Data Protection Regulation (GDPR)
EU Data Act
ePrivacy rules and cookie consent

GCC

Saudi Personal Data Protection Law (PDPL)
UAE Federal Personal Data Protection Law
DIFC and ADGM data protection regimes

Global

ISO/IEC 27701 Privacy information management
OECD Privacy Guidelines
US state privacy laws

Events & webinars

Upcoming sessions for this pillar.

New dates are being finalised. Join the network to hear about upcoming roundtables, webinars and panels first.

Articles & insights

Analysis and regulatory updates from practitioners.

Privacy

Privacy by design in practice: five habits of effective teams

Data protection by design and by default is a legal requirement under the GDPR. Effective privacy teams turn it into everyday habits.

LIC Editorial Team1 min read

Expert contributors

The practitioners who lead and contribute to this pillar.

Replace the placeholders with confirmed pillar leads and contributors (photo, name, role, organisation).

Pillar lead

[Contributor name]

[Role]
[Organisation]

Contributor

[Contributor name]

[Role]
[Organisation]

Contributor

[Contributor name]

[Role]
[Organisation]

Bring your expertise to the Data Protection & Privacy pillar.

We invite women working across Governance, Risk, Internal Control, Compliance and related disciplines to express their interest in joining Ladies in Control and contributing to its development.