Summary
Overview
Work history
Education
Skills
Websites
Certification
References
Interests and other initiatives
Timeline
Generic
Nish Imthiyaz

Nish Imthiyaz

London,United Kingdom

Summary

A seasoned professional with expertise in Data Privacy & Cyber Law, Responsible AI Governance, and Global Digital Regulatory Compliance. Demonstrates a strong proficiency in Corporate Governance, Contract Negotiation & Drafting, and Digital Ethics. Committed to advancing ethical standards and regulatory compliance within the digital landscape while aiming to drive responsible innovation and governance.

Overview

2023
2023
years of professional experience
1
1
Certification

Work history

Global Legal Counsel, Privacy, AI, Cyber and Digital Regulations

Vodafone Group
London, United Kingdom
  • Lead counsel for Vodafone’s global Responsible AI and data strategy, combining privacy, AI, cybersecurity, and digital regulation expertise across commercial and product initiatives.
  • Advise on and negotiate complex cross-border commercial contracts, including strategic technology partnerships (e.g. Google, Microsoft), licensing, cloud services, procurement, and platform agreements, with a focus on data governance, IP, and regulatory compliance.
  • Support Vodafone’s commercial, marketing, and procurement teams on structuring and reviewing technology agreements and client-facing terms and conditions, ensuring legal and commercial alignment across global markets.
  • Deliver end-to-end legal support on data protection compliance, including GDPR implementation, data processing terms, DPIAs, DSAR management, and incident response planning in collaboration with information security and privacy operations teams.
  • Developed Vodafone’s enterprise-wide approach to the EU Data Act and Digital Services Act, including legal guidance, contract templates, and stakeholder training for product, legal, and compliance teams.
  • Provide regulatory and transactional advice on matters involving student data, digital platforms, AI-driven services, and cyber risk, including during product launches and acquisitive transactions.
  • Supported numerous M&A transactions, including bespoke joint venture structures, cross-border acquisitions, and three major divestments, providing specialist legal input on data privacy, AI, and IP risk allocation.
  • Acted as lead counsel in contentious matters involving contractual disputes with vendors and third parties, including liability allocation following data breaches, enforcement of indemnities, and complex DSAR disputes.
  • Key member of the global AI Portfolio Board and Responsible AI Leadership Team, providing legal oversight on AI deployment, model governance, human oversight, and documentation standards under the EU AI Act and ISO 42001.
  • Collaborate cross-functionally to integrate legal requirements into AI supplier onboarding, SLAs, and procurement frameworks in line with DORA, NIS2, and the Cyber Resilience Act.
  • Manage and develop a team of two lawyers, overseeing legal support across privacy, technology, and AI, and acting as point of escalation for high-risk or business-critical matters.
  • Represent Vodafone in regulatory and policy engagements with industry bodies, regulators, and standard-setting forums.

Associate Privacy Counsel

Vodafone Group
10.2021 - 01.2023
  • Provided legal advice on complex data privacy and cybersecurity matters within the telecommunications sector.
  • Supported the business in achieving compliance with GDPR and other global privacy standards.
  • Management of global data processing agreement including updates such as new SCC.
  • Designed and created a variety of self-service tools such as a liability calculator in data processing scenarios and DPA generator.

Legal Counsel, Data Protection and Commercial

OSB Group
Kent
02.2020 - 10.2021
  • Advised on corporate governance, data protection, and technology-related legal issues.
  • Oversaw compliance with GDPR, including drafting policies, reviewing contracts, and conducting impact assessments.
  • Provided legal support on data protection compliance, including privacy policy development and training.

Education

LPC - Law

The University of Law
01.2016 - 1 2018

Master of Laws (LLM) - Corporate Governance

Queen's University Belfast
01.2013 - 1 2014

Skills

  • Data Privacy & Cyber Law
  • Dispute Resolution
  • Responsible AI Governance
  • Global Digital Regulatory Compliance
  • Corporate Governance
  • Contract Negotiation & Drafting
  • Digital Ethics

Certification

Certified Information Privacy Professional – Europe (CIPP/E), IAPP, 06/01/20

References

References available upon request.

Interests and other initiatives

  • Member of JTC21 / WG 4 (standards developing organisation)
  • Contributing to IAPP AIGP next edition textbook
  • Member of advisory board for AI Assurance Club
  • GSMA participant on AI roadmap and broader standard initiatives
  • Co-authored white paper on Multi Actor Governance Framework

Timeline

Associate Privacy Counsel

Vodafone Group
10.2021 - 01.2023

Legal Counsel, Data Protection and Commercial

OSB Group
02.2020 - 10.2021

LPC - Law

The University of Law
01.2016 - 1 2018

Master of Laws (LLM) - Corporate Governance

Queen's University Belfast
01.2013 - 1 2014

Global Legal Counsel, Privacy, AI, Cyber and Digital Regulations

Vodafone Group
Nish Imthiyaz