Dr. Natalya Spuling

Senior GDPR Specialist – HR & Employee Data Governance

Senior GDPR Specialist for HR and Employee Data Governance with over 10 years of legal experience, focusing on complex, multi-country HR environments and workforce data protection.
Extensive expertise in GDPR compliance within global HR systems, covering Core HR, Payroll, Recruiting, Talent & Performance, Compensation, Learning, Workforce Management, and employee case management across the full employee lifecycle.
Proven lead in HR-related DPIAs, TIAs, cross-border workforce data transfers, and global HR transformation programs, including preparation of structured risk documentation and management decision papers.
Strong experience in Works Council negotiations and co-determined environments, supporting HR system implementations, employee data governance frameworks, and policy alignment in regulated contexts.
Established and rolled out standardized HR GDPR frameworks, including retention concepts, transfer mechanisms, documentation models, role-based access structures, and harmonized methodologies across multiple jurisdictions.

Last 3 projects

2024 – 2025	Public-Owned Company	Senior GDPR Advisor – Revised group-wide privacy policies; advised on consent processes and social data protection in HR-related contexts.
2023 – 2025	International Pharmaceutical Group (M&A)	GDPR & Workforce Data Lead – Directed cross-border TIAs for global workforce data flows; advised HR and senior management on mitigation measures and documented risk acceptance decisions; assessed target companies’ data protection readiness.
2020 – 2022	Market Research Services Provider	HR Data Protection Framework Lead – Designed and implemented a standardized HR data protection framework covering the full employee lifecycle, including retention concepts, role-based access models, and international transfer mechanisms.