DataGuard 

Senior Consultant Privacy 

Senior Consultant Privacy - Global Corp.

Rehabilitation Culture CIC

Rehabilitation Culture is a small Community Interest Company that supports men over 50 in prison in preparation for their release

Director

DPOrganizer

Senior Data Protection and Customer Solutions Expert

BCS, The Chartered Institute for IT

Head of Compliance

Compliance Manager

Data Protection Lead

My background in front line operations, compliance, management and training in financial institutions, stood me in good stead when I fell into the world of Data Protection.  I qualified as a Data Protection Practitioner in December 2019 and I've been hooked ever since!

Recognised as being a highly motivated individual with strong communication skills, I was shortlisted and a finalist in the categories of Rising Star and Compliance Officer of the year at the PICASSO awards in 2022.

Having presented at a number of international conferences, spoken on panels and contributed to international privacy drives I enjoy enthusing others, sharing my knowledge to stakeholders helping them develop and strong and uncomplicated privacy culture and ethos across the organisation.

As an ISO 9001 Quality Management Systems Lead Auditor, I believe that compliance of all relevant legislation should part of an organisations culture and not a tick box exercise. My ability to interpret and delivery regulatory requirements across the business, whilst maintaining high internal principles and keeping external business drivers at the fore, ensures that compliance does not become an afterthought in the business.

In my current role, I work with a number of international clients of all sizes, helping them to develop and deliver their privacy programme in a manner that suits their organisation.  Understanding the customers drivers and priorities is critical to success.

My passion for data protection privacy is linked closely to my passion for people. I firmly believe that data protection and privacy is not and should not be just a work thing but a life thing. Data protection and privacy are all about looking after people - just like you and me.

Elizabeth Smith

Purpose and Means

I'm Business Owner of Purpose and Means, a niche digital GRC consultancy based in Copenhagen and operating globally. 

Our quest is to ensure digital GRC is not a tick-box or superficial task in companies.

We typically work with legal departments bringing skills and competences that many legal professionals lack.

We help overcome the perception that data protection, digital and AI regulation is solely a legal issue.

The legal bias can block the potential in some companies to frame data, AI and cyber initiatives as a business imperatives.

But if these important topics remain theoretical in your company, and there continues to be a disconnect between regulatory leadership and the other business functions, they will never become living and breathing.

Business Owner

Institute of Operational Privacy Design (IOPD)

Advisor

IAPP - International Association of Privacy Professionals

Was an official IAPP Training Partner delivering IAPP certification courses CIPP/E, CIPM, CIPT, CIPP/US and AIGP worldwide via my business, purposeandmeans.io.
Initially through Logical Operations and then directly with IAPP. In April 2025, I informed IAPP that I wished to terminate my partner agreement.

Official IAPP Training Partner

Was an approved IAPP instructor delivering IAPP’s CIPM, CIPP/E and CIPT courses directly for IAPP (at their events and conferences) and onsite at IAPP clients worldwide. In April 2025, I informed IAPP that I wished to leave the Faculty.

IAPP Faculty

Novozymes

Temporary position.
Defined the IT governance model for strategic IT investment planning and IT risk mitigation.

IT Governance Manager

Managed the programme to execute Novozymes global Corporate Information and Physical Security Strategy.

Global Security Programme Manager

Carlsberg Group

Responsible for ensuring Carlsberg's IT organisation was compliant with applicable laws and regulations (incl. EU & relevant national legislation) as well as Carlsberg Group policies across 17 European countries.

Responsible for Carlsberg’s Enterprise Risk Management process in the pan-European IT organisation (Local Risk Officer), including facilitating risk workshops, developing risk registers, producing heat maps, consolidation and reporting to Enterprise Risk Management at Carlsberg Group level. 

Local Security Officer (LSO) for the pan-European IT organisation including conducting security awareness initiatives and project ownership of the Information Security Policy Rollout project.

Head of IT Compliance

Interim Contract
EU directives compliance program (EUROSOX)
Addressing the EU directives (4th directive 78/660/EEC, 7th directive 83/349/EEC & 8th directive 84/253/EEC) using ISO 27001/2 as the basis for assessing IS control environments across 15 Carlsberg business entities: Denmark, Norway, Sweden, UK, Poland, Germany, Switzerland, Italy, Portugal, Russia, Ukraine, Group HQ, Malaysia, France, Finland.

In addition, managed various IT-enabled business projects and programs.

Programme Manager

IT Quality Assurance Manager

Sarbanes Oxley SOX 404 compliance. Facilitation of Process Integration Workshops. Integrating IBM financial business processes and systems into the newly acquired DMdata organisation - specific focus: Business Controls.

Business Controls Specialist

Transition project management (IT outsourcing) in 1600+ employee facility management organisation jointly owned by Danske Bank and AP Møller Maersk.

Transition Project Manager

Aviva plc

Various projects and programmes for the 1500+ mature PRINCE2/ITIL IT organisation supporting Aviva's financial services businesses (serving 50 million customers worldwide).

Ecommerce Project Manager

I believe that leaders and employees *with passion* for technology regulation e.g. data protection and AI regulation, can significantly reduce the risks that inherently exist when deploying technology and processing data.

I'm a Chartered Fellow (FBCS CITP) of the British Computer Society (BCS) and Fellow of Information Privacy (IAPP) with a strong track record  of orchestrating the change needed in organisations to establish governance structures, risk management systems and comply with applicable laws and regulations.

My experience has deep roots in GRC going back over 20 years involving roles encompassing data protection, information risk, information security, business analysis, change management, establishing governance and compliance project & programme management. I possess a number of industry-standard certifications covering these areas including ECPC-G, ECPC-B, CIPT, CIPM, CIPP/E, CRISC, CGEIT & CDPSE.

I'm Business Owner of Purpose and Means, a niche digital GRC consultancy based in Copenhagen and operating globally. 

Our quest is to ensure digital GRC is not a tick-box or superficial task in companies.

We typically work with legal departments bringing skills and competences that many legal professionals lack.

We help overcome the perception that data protection, digital and AI regulation is solely a legal issue.

The legal bias can block the potential in some companies to frame data, AI and cyber initiatives as a business imperative.

But if these important topics remain theoretical in your company, and there continues to be a disconnect between regulatory leadership and the other business functions, they will never become living and breathing.

taplio

The Battle

Elizabeth Smith

Tim Clements

Followers

Posts

Engagements

Likes

Ready to grow your LinkedIn presence?