Natalya Spuling

by Anita-Dora Andreadis | 11. February 2026

Dr. Natalya Spuling

Senior GDPR Specialist – HR & Employee Data Governance

Senior GDPR Specialist for HR and Employee Data Governance with over 10 years of legal experience, focusing on complex, multi-country HR environments and workforce data protection.
Extensive expertise in GDPR compliance within global HR systems, covering Core HR, Payroll, Recruiting, Talent & Performance, Compensation, Learning, Workforce Management, and employee case management across the full employee lifecycle.
Proven lead in HR-related DPIAs, TIAs, cross-border workforce data transfers, and global HR transformation programs, including preparation of structured risk documentation and management decision papers.
Strong experience in Works Council negotiations and co-determined environments, supporting HR system implementations, employee data governance frameworks, and policy alignment in regulated contexts.
Established and rolled out standardized HR GDPR frameworks, including retention concepts, transfer mechanisms, documentation models, role-based access structures, and harmonized methodologies across multiple jurisdictions.

2024 – 2025	Public-Owned Company	Senior GDPR Advisor – Revised group-wide privacy policies; advised on consent processes and social data protection in HR-related contexts.
2023 – 2025	International Pharmaceutical Group (M&A)	GDPR & Workforce Data Lead – Directed cross-border TIAs for global workforce data flows; advised HR and senior management on mitigation measures and documented risk acceptance decisions; assessed target companies’ data protection readiness.
2020 – 2022	Market Research Services Provider	HR Data Protection Framework Lead – Designed and implemented a standardized HR data protection framework covering the full employee lifecycle, including retention concepts, role-based access models, and international transfer mechanisms.

by Andreas Weller | 16. September 2025

Data Protection Expert

Over 7 years of international privacy governance experience across LATAM and Europe, with global companies such as Toyota, AB InBev, Telefonica, and Deloitte.
Certified Privacy Manager (CIPM, IAPP) with strong expertise in GDPR, LGPD, DPIAs, RoPAs, and OneTrust.
Proven track record in privacy-by-design for IT and marketing platforms, advising cross-functional product and tech teams.
Experienced in large-scale privacy programs and regulatory engagement, including support for three European DPA investigations.
Published author and lecturer on privacy, technology, and product compliance topics.

06/2024 – 09/2025	Automotive (Toyota Motor Europe, Belgium, Remote)	Data Protection & IT Compliance Consultant – GDPR, AI Act, PCI-DSS, NIS2; reviewed 500+ RoPAs, 100+ DPIAs
05/2022 – 02/2024	Consumer Goods / FMCG (AB InBev, Remote)	Global Privacy Product Manager – Global privacy strategy for MarTech & consumer data, privacy-by-design, FIFA World Cup campaigns
06/2021 – 05/2022	Data Services (Global Data Bank, Brazil, Remote)	Data & Privacy Lead – Developed privacy risk detection product, internal privacy program, privacy-by-design in product teams

Privacy program implementation & governance (GDPR, LGPD, RoPA, DPIA)
Privacy-by-design for apps, consumer platforms, and marketing technologies
Stakeholder training, process optimization, and regulatory investigation support
Technical cybersecurity