Maria Leigh

Lead privacy and AI governance initiatives for a global medical device technology company, providing strategic legal support across international business operations. Advise senior stakeholders on data protection, AI governance, digital transformation, and technology-related risks, enabling compliant innovation and business growth. Partner with legal, compliance, information security, procurement, HR, and commercial teams on complex global initiatives involving emerging technologies.

Provided legal input on vendor and digital initiatives, supporting contract structuring and risk assessment in collaboration with IT and business teams. Established a privacy champion network (one representative per key function), driving privacy awareness, risk ownership and implementation of privacy priorities across business functions. Led monthly governance meetings for emerging risks and project support. Reviewed global digital initiatives prior to local rollout; provided risk-based recommendations, an

Trusted advisor on global privacy and data governance matters, supporting technology, digital innovation, and emerging technology projects. Conducted DPIAs, TIAs, and privacy risk assessments, developed mitigation plans, delivered executive reporting, and trained cross-functional stakeholders worldwide.

Led enterprise GDPR readiness initiatives, including data mapping, Records of Processing Activities (RoPA), policy development, and privacy governance frameworks. Partnered with business and technology stakeholders to operationalize privacy compliance across complex IT environments.

Served as trusted legal advisor to business units on commercial contracting, regulatory compliance, digital services, and technology-related matters. Managed regulatory engagements, supported strategic projects, and contributed to enterprise-wide GDPR implementation efforts.