I am a Tech Lawyer with a degree from the University of Copenhagen, and I also hold a Market Economist degree from the Business Academy in Aalborg.
This combination has given me a strong and well-rounded understanding of both the legal and commercial aspects of running a business—from its initial setup to the development of compliant digital solutions, and everything in between.
This background also supports my current practice by enabling me to provide targeted advice and design tailored services that meet the specific needs of different client groups.

My introduction to the fields of data protection and information security happened while working on a significant project in the public sector, and this was prior to GDPR. This experience allowed me to understand the intersection of legal, information security, and organizational processes. A perfect combination I must say.
I had already a lot of experience and training due to my previous education and jobs.
So, I discovered my passion for this field; its complexity and multidisciplinary nature resonated deeply with me and suited my personality perfectly.
Since then, I have continually pursued further education and training, finding that as the field has grown more involved, my interest and enthusiasm have only increased.
I transitioned rapidly from employment in the public sector to establishing my first consulting firm.
In 2016, I became the first Data Protection Officer (DPO) in Denmark to offer DPO as a Service. I take pride in this achievement, particularly because, at that time, few people understood the role of a DPO or were familiar with the General Data Protection Regulation (GDPR).
The concept of GDPR was known to some extent, but its exact implications and implementation methods were not widely understood.
Presently, many organizations still find it challenging to fully embrace and respect the role of a DPO, even those of considerable size.
I made a deliberate decision to alternate between being employed in-house and self-employment as a means of accelerating my learning curve.
This is how I felt to be the perfect solution for me.
Currently, I find that I have greater satisfaction from being self-employed.
Being hired to fix a problem in the organization is quite a challenge but also an amazing opportunity to apply years of experience, and see a final result of your advice or hands-on solutions – this motivates me a lot.

I decided to pursue a career in law when I was around 14 or 15—I don’t remember the exact age. At the time, I was also considering a path in the army or police force, but there was something about law and the role of a lawyer that truly fascinated me.
So, I became a lawyer.
Later on, I even discovered through numerology that it might have been destined—make of that what you will 😊
After five years at university and entering the profession, I realized that my approach is quite different. My background in business, combined with hands-on experience, has shaped a practical way of working with complex legal matters. I don’t fit the “traditional” image of a lawyer.
Those who have worked with me know exactly what I mean.
Want to learn more? Let’s connect!
Now I have more than 12 years of experience in the field of GDPR and InfoSec. I have worked among others with AI projects, data-driven marketing, and cookie compliance since 2018. Having my focus on the EU Digital Strategy, additional areas caught my interest: AI Act, NIS2, DORA, CER, Data Governance Act, Cyber Resilience Act, Data Act, Digital Services Act, European Health Data Space. I work with ISO-standards, NIST, CIS.
Depending on the specific projects for which I am hired, either in an advisory capacity or as a hands-on project manager, I may also need to comply with other laws, including eIDAS, Money Laundering Act, and the Public Administration Act.
While my journey began with GDPR, it's not all about GDPR anymore.

If you choose to work in this field, you can be very certain that you can’t get bored. This field is ever-evolving, and every single day there are many challenges and new opportunities to learn even more.
You work from hands-on to strategic data compliance and work closely with the organization at every level.
Working in this field you will play a crucial role in safeguarding individuals’ personal data and ensuring organizational compliance with regulations.
This field is a multidisciplinary field, a mix of legal, technological and organizational aspects. You must stay updated with the latest developments and that helps your continuous learning and professional growth.
I value the flexibility to manage my time, select my projects, and choose my collaborations. The more complex area or project the more it motivates me.
I experience increased motivation and job satisfaction by engaging in work that aligns with my personal interests, passions, and area of expertise. The necessity to remain engaged and continually improve my skills aligns well with my personality and current stage of life.
I now prioritize my own physical and mental health before saying yes to a project.
However, I must say that it has not always been this way.
Well, like anything else, there are always pros and cons. Now it depends on how you want to look at it.
And in this profession, there are cons on both professional and personal sides.
On the professional side, this industry has changed a lot. I experience a lack of engaged consultants - not as much as me, I don’t expect that, but at least share the same passion. I appreciate a lot when through circumstances I find people with the same smile on their faces when talking about this field.
However, it is not only about the passion, it is also a lot about the level of expertise and not being accountable for the poor advice that is given out there. This trend often leaves companies with inadequate compliance guidance.
My advice for companies is to perform due diligence and hire insured professionals.
On a personal note, I experienced burnout. I have not spoken publicly about this, as it has been a challenging period in both my professional and personal life.
Better to read their own words:
“Olga is an open and warm person, whose human view embraces everyone. A special remark: Her sense of humor is fantastic! When chatting on coffee break, when just saying a quick hello while rushing from meeting to meeting or back from lunch break… And I miss her smile and sparkling laughter!”
“I have had the pleasure of working closely with Olga, and without a doubt, I can confidently say that she is the best DPO I have ever had the privilege of collaborating with.
Olga possesses an unparalleled set of skills that make navigating the complexities of GDPR seem effortless.
Her in-depth understanding of data protection regulations, coupled with her strategic approach, has made compliance not only achievable but also streamlined for the organisation.
What sets Olga apart is her ability to demystify the intricacies of GDPR, making it comprehensible and accessible to everyone. Her commitment to creating a culture of data privacy is truly commendable, and under her guidance, the organisation saw a remarkable improvement in our data protection practices.”
“Olga's approach to the tasks and collaboration in general was constructive, energetic, positive and visionary.”
They often say people don’t leave jobs—they leave managers. But that’s not always the full picture. Ultimately, your mental health is your own responsibility. And I had to learn that the hard way.
It has been challenging for me to acknowledge burnout and follow my doctor's advice to take a break. Instead, I moved to another demanding in-house job and very soon after I found myself attending interviews for other positions.
It became increasingly evident that a personal transformation was essential for me to either continue in this field or explore other opportunities.
Although efforts were made to hide burnout from colleagues and contacts, the condition worsened. Therefore, it is important to listen to your body and recognize when it is necessary to take a step back.
And it is acceptable to do so. I am thankful now that I’ve experienced that – I value everything much more than before. I exercise regularly and I meditate a lot.
I find those very helpful for my personal and professional life.
I’ve also learned to ask the right questions to determine if a work environment is the right fit for me
First of all, it is not necessary to be a lawyer to work in this field.
But please, don’t just work in this field because it is trendy!
However, having a significant interest and dedication to this field is important to succeed.
Working in this field requires continuous learning and skill development, as well as extensive networking within and outside the organization.
There is much to consider in this field, and understanding GDPR alone is not sufficient for success.
This is what I always communicate to my mentees.
Naturally, this varies based on each individual's unique personality and aspirations.

I transfer complex challenges into actionable strategies, helping organizations making well-informed and risk-based decisions.
Count on my personalized service focused solely on your goals, applying advanced knowledge for sustainable outcomes.
Receive dedicated support at every step of the process with me by your side. Your success is my priority.
INNOVATIVE APPROACH
GPRC Matrix 4.5 - simple enough for anyone, powerful for experts
GPRC Matrix 4.5 pioneers a new SaaS category by unifying Governance, Performance, Risk, and Compliance across core functions such as Legal, Compliance, Risk, Security, and Audit.
At its core: one unified, intelligent SaaS platform powered by in-house autonomous agentic AI—secure and ethical by design, delivering full data and technology sovereignty.
GPRC Matrix 4.5 adapts to each organization’s unique structure with a tailored, customer-centric framework —helping teams anticipate risks, stay ahead of evolving regulations, and maintain operational continuity.
Scale confidently → Protect critical assets → Navigate regulations and international standards.
GPRC Matrix 4.5. Detect → Interpret →Decide → Execute → Document
UNIQUE APPROACH
Insights, stories, and real talk from the world of data protection.
As a seasoned Data Protection Officer (DPO) I produce and host "Confessions of a DPO", that offers listeners a behind-the-scenes look at the challenges, triumphs, and lessons learned in the ever-evolving landscape of data protection and compliance.
Each episode features candid discussions, experienced and newcommers guests, that share insights, perfect for professionals navigating the complex world of data protection.
This project a non-profit project sponsored by Nordic Data Compliance Centre, a project that started in January 2025.
Streamed in more than 160 countries by end of 2025, the podcast series will return in 2026 with "Confession of a DPO..and friends".
Tune in for:
Real-world advice from a DPO’s perspective.
Deep dives into data protection regulations and best practices.
Exclusive stories from the front lines of compliance.
Whether you're a seasoned professional or just starting your journey in data protection, "Confessions of a DPO"is your go-to source.
FINLAND
MyDataGlobal Conference
"Compliance as a driver of ethical business and customer value for companies" and a training session "Incident management aligned with GDPR, NIS2 and DORA" were my contributions for this year's conference. A week of positive energy and inspiration, meeting beautiful people sharing same interests and values.

Sweden
Nordic Privacy Arena
Live recording of a teaser episode of Confessions of a DPO podcast - this time with a topic alined with the NPA's theme: “A Decade of Progress, A Future of Responsibility”
You can find the recording here, with important revelations and critical understandings from the younger generations, as well as invaluable knowledge from Swedish DPA.

Norway
North European Cyber Days
What a week I had of different activities: a session on Secure Data Sharing in Practice, a panel discussion on Navigating Regulatory Requirements for NIS 2 Compliance in Healthcare and Critical Sectors and a Head of Jury that together with other Jury colleagues I helped select some of the most promising European cybersecurity start-ups.

A huge milestone of signing the partnership ageement with PECB as well as becoming a certified trainer.
PECB is a certification body dedicated to fostering digital trust through comprehensive education, certification, and certificate programs across various disciplines.
As the CEO and Managing Partner at Nordic Data Compliance Centre, I am looking forward to the membership with ECSO. Together, we can build a resilient and strategically autonomous Europe.
Being a memberof ECSO(the European Cyber Security Organisation) means that you are part of an influential European network dedicated to advancing cybersecurityand digital securityacross the continent. ECSO is a nonprofit organization that brings together industry leaders, governments, academia, and other stakeholders to collaborate on improving cyber resilience, data protection, and digital infrastructure.
Being a member of MyDataGlobal means actively contributing to a more ethical, transparent, and individual-focused approach to managing personal data.
It also means being part of a global community and network focused on promoting personal data rights, privacy, and data empowerment.
MyDataGlobal is an international nonprofit organization that advocates for human-centric data governance—meaning that individuals should have control over their own data and how it's used, shared, or sold.
We are deeply aligned with MyDataGlobal's commitment and we are proud to be a part of this incredible network.
