Open to opportunities

Gergana Chausheva

@gerganachausheva

Senior data protection leader combining legal analysis with operational compliance to protect organisations and reduce regulatory risk.

United Kingdom

Message

What I'm looking for

I’m looking for a senior privacy/data protection role where I can lead regulatory compliance and incident response, manage stakeholder needs, and drive practical implementation of DPIAs, lawful basis, and international transfer requirements.

I’m an authentic, results-driven data protection leader with over 7 years of experience in data protection, stakeholder management, and regulatory compliance, specialising in guiding organisations across private and public sectors toward compliance with data protection laws. As a Senior Data Protection Lead and Data Protection Officer’s Team lead at the Ministry of Defence, I manage data protection claims at the pre-action litigation stage, lead incident management and response, and respond to ICO complaints with timely, risk-aware actions and clear remediation next steps.

I also drive capability across the organisation by leading a network of local data protection advisors and delivering training that translates complex legal requirements into practical business examples. Previously, I implemented an operational data protection claims framework that saves the MOD over £100k per year, and I reduced a backlog of over 200 data subject requests within two months. I bring a strong legal-compliance foundation through IAPP CIPP/E certification and my SQE progress (passed SQE1; SQE2 pending), with deep experience across DPIAs, lawful basis, data sharing agreements, international transfer mechanisms (IDTAs, SCCs, and TRAs), and privacy policy and notice drafting.

Experience

Work history, roles, and key accomplishments

Current

Senior Data Protection Lead

Current

Ministry of Defence (MOD)

Sep 2023 - Present (2 years 7 months)

Manage MOD data protection claims at the pre-action litigation stage, including incident response and triage, ICO complaint handling, and regulatory correspondence. Lead the MOD network of local data protection advisors and guide DPIAs, DSRs, lawful basis decisions, and international data transfer documentation.

GDPR Incident Response DPIAs

Data Protection Compliance Officer

Ministry of Defence (MOD)

Mar 2022 - Sep 2023 (1 year 6 months)

Implemented and operationalised a MOD data protection claims management framework in collaboration with the Government Legal Department, saving the MOD over £100k per year. Handle ICO complaints, assess data protection incidents, advise stakeholders on lawful basis and DSRs, and complete Legitimate Interests Assessments (LIAs).

GDPR Claims Management DSR Handling Legitimate Interest Assessments Stakeholder Management Risk Mitigation

Data Protection Team Support

Ministry of Defence (MOD)

Jan 2021 - Mar 2022 (1 year 2 months)

Provided first-line advisory support for MOD data protection enquiries, including DSRs, DPIAs, breaches, data sharing, records management, and legal basis for processing. Maintained completion-focused records of complaints and incidents and delivered data protection webinars and training across the organisation.

GDPR DPIAs Data Sharing Records Of Processing (ROPA)Legal Basis For Processing

Data Protection Adviser

Green Network Energy

May 2020 - Jan 2021 (8 months)

Provided data protection policy advice to senior management and revised personal data processing contractual clauses. Led internal audits and risk assessments (including DPIAs), managed ICO relationship and complaints, and reduced a backlog of 200+ data subject requests by assigning tasks and clearing it within two months.

GDPR DPIAs Records & Policy Integration

Data Protection Analyst (Legal)

GSMA

Aug 2017 - Mar 2020 (2 years 7 months)

Managed GDPR implementation activities and delivered 80+ data protection deliverables within 10 months. Updated 200+ contracts with GDPR-compliant terms and enforced 20 key data protection policies, while handling 50+ enquiries per week and maintaining ROPAs for 200+ high-risk processing activities using Salesforce and OneTrust.

GDPR Legal Research DPIAs Salesforce OneTrust

Student-Staff Postgraduate Rep

Queen Mary University of London

Nov 2016 - May 2017 (6 months)

Served as a postgraduate course representative, resolving disputes between LLM students and lecturers/tutors and working with programme directors to refine LLM programme delivery. Evaluated course effectiveness using module structure analysis and student feedback.

Student Representation Stakeholder Management Module Effectiveness Evaluation Communication

Co-Founder/Managing Director

Edinburgh Napier Law Clinic

Feb 2014 - Jul 2016 (2 years 5 months)

Co-founded and managed the Edinburgh Napier University law clinic, supervising a team of 20 student advisors and handling client caseloads in employment, contract, and housing law. Drafted contractual clauses, negotiated terms for clients, and produced clinic articles published in legal and news outlets.

Contract Drafting Negotiation Employment Law Caseload Management