Bethany S. Email & Phone Number

London, London, Gb

Develops, drives, implements, and assesses global Data Privacy and Information Management strategy. Ensures GDPR, UK data protection law, and applicable US data privacy law compliance through privacy-by-design and ISO 27701 alignment. Evolves privacy operations to grow alongside corporate, climate, and technology strategies, for 30,000-strong regulated utility committed to digital and Net Zero transformation. Founding member of cross-functional Data Governance Council, responsible for ethical and compliant AI policies, processes, and procedures. Manages multi-million dollar budget and 17-20 person team of Data Privacy and Information Governance professionals.Represents National Grid Data Privacy Office with internal and external partners and stakeholders, including regulators, trade organizations, auditors, vendors, and the Board of Directors.

Bedford, Massachusetts, Us

Designed, socialized, implemented, and scaled data protection vision, mission, and strategy. Built and delivered global data privacy program, founded on consumer trust, data ethics, and human rights, aligned with ISO 27701 framework, and with GDPR, CCPA/CPRA, PIPEDA, CASL, CAN-SPAM, LGPD, APPI, and PIPL compliance as outcomes. In addition to 2-3 FTEs and interns, managed cross-functional team of “Privacy Champions” charged with implementing privacy-by-design operational strategy at every level of the organization. By socializing data governance responsibilities through a “Champions network”, iRobot saved over $1 million in personnel-related costs and data protection rework.Redesigned executive leadership’s OKR framework to align with KRIs, KPIs, and global technology strategy, enabling clearer view of risks, opportunities, roadmap priorities, and resourcing needs. Led Global IT Organization’s corporate restructuring; led workshop to guide Global IT Leadership to a refreshed, concise, inclusive vision and mission statement. Led follow-on strategy and OKR workshop. Developed and sustained relationships with Board members and regulators via “Privacy in M&A” playbook and due diligence strategy, regular reporting to Audit Committee, and ongoing contact with UK’s ICO and France’s CNIL.

London, Gb

Provided data privacy program development and compliance consulting services to a range of global clients, including start-ups and nonprofits. Services included:-Privacy-by-Design strategic development & implementation, ensuring GDPR rights in all data subject locations.-Third party risk management process development, data identification and mapping strategies, incident response policy suite, and data processing activity documentation.-Development and delivery of risk identification metrics, risk management policies, data breach investigation and notification procedures, privacy notices, and organizational policies.-Risk, compliance, and privacy program roadmap development services to support ongoing and future strategic initiatives.

Vancouver, British Columbia, Ca

Established the organization’s first Privacy & Compliance Department, Registered as DPO with Hamburg DPA.Designed, implemented comprehensive data protection program, leading to PCI-DSS, CSA STAR, GDPR, and PIPEDA compliance, and a SOC 2 gap assessment. Programmatic and operational improvements included introducing data mapping and inventorying processes, records of data processing activities, a PIA/DPIA process, updated data processing agreements and vendor MSAs, a vendor onboarding and third party lifecycle management process, new privacy notices & terms of use, and a comprehensive Trust & Safety training program.Introduced and operationalized information security, incident response, and data breach notification policies, processes, and procedures.

Master Of Laws (Ll.M.), Public International Law

Bachelor Of Arts (B.A.), Government And International Relations

International Relations And International Law