Samantha Ferreira-Pontes

Key Responsibilities Impact Highlights

Lead regional privacy and data protection governance across multiple jurisdictions in a highly regulated global asset management environment. Partner closely with legal, technology, cyber security, HR, marketing, and digital teams to ensure responsible data governance across complex operational systems. Promote a strong speak-up culture, ensuring concerns are investigated thoroughly and transparently.

· Lead regional and global privacy, ethics, and data protection governance, aligning programmes with business strategy and evolving regulatory expectations.

· Embed privacy-by-design and ethical decision-making into operational processes, technology deployments, and digital initiatives.

· Act as senior escalation point for privacy incidents, investigations, and regulatory risk matters, ensuring fair and defensible outcomes.

· Establish governance frameworks for AI-enabled systems and automated decision-making, embedding proportionality, bias awareness, and meaningful human oversight.

· Govern high-risk surveillance and monitoring technologies including CCTV, biometrics, behavioural analytics, and workforce monitoring, ensuring privacy-by-design and ethical oversight in complex operational environments.

· Partner with IT Security on cyber incidents, data loss events, and operational resilience, including eDiscovery, access control governance, and DLP programmes

· Design and operate risk-based privacy, ethics, and cyber controls including approval gates, assurance testing, and audit reporting.

· Deliver clear risk reporting to General Counsel, Executive Committees, Boards, and Audit Committees.

· Delivered governance and compliance programmes across multiple jurisdictions and regulatory regimes.

· Designed and delivered engaging ethics, data protection privacy, AI, and cyber awareness training to 10,000+ employees globally .

Reduced compliance and data risk exposure by 25% through strengthened governance, tooling, and cross-functional collaboration.

• Orchestrated team training for improved operational efficiency.

Key Responsibilities and Impact

Owned the design and implementation of a global information governance and data protection framework spanning multiple international jurisdictions.

· Developed and implemented five-year strategy covering privacy, compliance, and ethical data use.

· Led internal audits and compliance assessments to measure policy adherence, identifying risks and driving improvement programmes.

· Acted as subject matter expert on privacy and compliance for senior leadership, HR, IT, and marketing teams.

· Oversaw third-party risk management, due diligence, and vendor compliance monitoring.

· Drove adoption of governance standards across diverse international business units.

· Strengthened regulatory posture and audit readiness across global operations.

Embedded a pragmatic, business-aligned governance culture supporting operational growth.

· Delivered GDPR maturity assessments and remediation programmes for FTSE 100 financial services clients.

· Provided specialist advice on DSAR management, breach response, investigations, and regulatory reporting.

· Designed governance frameworks and delivered training for senior stakeholders.

Led enterprise-wide compliance and governance programmes across five corporate entities.

· Implemented data classification frameworks, retention strategies, and Records of Processing Activities.

· Delivered governance improvements aligned with SMCR accountability requirements.

· Partnered with C-suite stakeholders to embed ethical data governance and accountability frameworks.

• Delivered strategic GDPR consultancy for major banking and asset management clients.
• Delivered end-to-end GDPR implementation programmes.
• Appointed Data Privacy Manager at Lloyd's Bank during GDPR launch.
• Advised on consent, digital advertising, surveillance, and high-risk processing.
• Developed governance frameworks, investigations protocols, and training.
• Key Achievements & Responsibilities

NHS CCGs & International Health Organisations 2012 – 2017

Led information governance and ethical data-sharing initiatives in complex public-interest environments.

· Developed secure health data sharing frameworks and governance structures .

· Delivered programmes balancing public trust, regulatory compliance, and operational delivery .

· Supported national and international health organisations implementing ethical data governance.