About Fiona Chan
For more than fifteen years, I have built privacy, data, and AI governance programs inside regulated businesses across financial services, critical infrastructure, energy, healthcare, and government. The work on this site comes from that practice: making governance practical in the business, not just complete on paper.
I lead privacy, data, and AI governance inside regulated businesses, bringing legal, risk, and operational disciplines into one working model. I set the architecture and I do the work. I build the model, assign ownership, simplify artefacts, and push governance into the decisions the business already makes.
I have led programs across financial services, critical infrastructure, energy and utilities, healthcare, automotive, government, and technology with scope spanning Europe, Asia-Pacific, Australia and New Zealand, and global operating environments. Financial services taught me discipline at scale. Europe sharpened my regulatory judgment.
With my legal training, I worked in internal audit at KPMG and corporate tax at EY before moving into privacy, data, and governance leadership. That foundation still shapes how I assess control design, regulatory exposure, and execution risk.
Admitted Solicitor · LLB · LLM · CIPP/E · CIPM · CIPT · AIGP
Speaking
Alongside the work, I also speak and brief boards, executive teams, and governance forums on privacy, data, and AI governance.