Nuria Baxauli

Global Privacy Manager | Trustworthy AI

Belgium

About

My career is fueled by a commitment to humanity and a curiosity about our increasingly interconnected world. With a background in law and an LL.M. in Law and Technology from Tilburg University in the Netherlands, I have developed an interdisciplinary perspective on the intersection of legal frameworks and emerging technology. Specializing in data protection, IP, and tech transactions, I have extensive experience managing technology agreements and privacy operations - including data subject rights, third-party risk, cookies/tracking technologies governance, and data breach response. I also lead privacy training and awareness initiatives to foster a culture of compliance, with a particular interest in behavior change. In 2024, I completed an advanced course in AI Governance at Tilburg University, deepening my expertise in ethical and responsible AI. I apply this knowledge strategically to solve complex legal demands, ensuring innovative solutions remain aligned with global regulatory and market standards. Currently serving as a Global Privacy Manager for a multinational organization, I leverage my experience across Brazil and various international jurisdictions to provide a truly global perspective. I am committed to delivering practical communication and solutions that help businesses navigate the challenges of today’s digital landscape.

Experience

  • Global Privacy Manager at Whirlpool Corporation
    Jun 2025 - Present · 1 yr 1 mo

    Global Privacy Manager. DPO for KitchenAid Small Appliances.

  • Senior Tech and Data Protection Lawyer at VLK Advogados
    Feb 2024 - Apr 2025 · 1 yr 3 mos

    · Leading the development and implementation of privacy programs and DPO-as-a-Service to ensure adherence to data protection regulations, including providing legal guidance on data subject requests, Data Protection Impact Assessments (DPIAs), Legal Impact Assessments (LIAs), and Records of Processing Activities (RoPAs). · Providing expert legal counsel on privacy matters for new projects and regulatory updates from Brazilian and European Data Protection Authorities. · Managing AI governance initiatives, including drafting policies, mapping AI systems, conducting risk assessments, and establishing internal processes to promote the ethical and responsible use of AI technologies. · Overseeing data breach response strategies, including compliance reporting to regulatory authorities, reviewing technical documentation and risk reports, and communicating with affected data subjects and other stakeholders. · Performing negotiations and contractual analyses to mitigate risks and ensure compliance with relevant data protection laws.

  • Tech and Data Protection Lawyer at Mattos Filho, Veiga Filho, Marrey Jr. e Quiroga Advogados
    Oct 2020 - Jan 2024 · 3 yrs 4 mos

    · Provided consultations on the ethical use of AI and analyzed the implications of the Brazilian proposal for AI regulation for different clients; · Developed a comprehensive data protection code of conduct tailored for the energy sector; · Managed security incidents, including effective communication and reporting to the National Data Protection Authority (ANPD); · Created a robust evaluation solution for assessing suppliers’ compliance with data protection legislation; · Drafted and negotiated technology contracts addressing complex issues, including the creation of a metaverse environment and the commercialization of autonomous vehicles cars; and · Led cloud contracting initiatives with public sector entities, ensuring compliance with data protection laws.

  • Privacy & Legal Compliance Apprentice at Philips
    Apr 2020 - Sep 2020 · 6 mos

    · Contributed to compliance and data protection initiatives within the global legal team. · Managed the data subject requests account, coordinating and overseeing all related requests to ensure full compliance with data protection regulations. · Conducted data retention analyses to align with legal and regulatory requirements. · Performed Data Protection Impact Assessments (DPIAs) to identify and mitigate privacy risks. · Maintained and reviewed Records of Processing Activities (RoPAs) for accuracy and regulatory compliance.

  • Researcher at BG.legal
    Feb 2020 - Apr 2020 · 3 mos

    Data Protection and other legal aspects of data and new technologies.