Description

When the regulatory stakes are high, the organisations that cannot afford to get it wrong do not gamble on generic advice.

I work with organisations across technology, healthcare, life sciences, financial services, and public sector on compliance that carries real consequences — market access, sensitive data, procurement approvals, regulatory enforcement. The details matter, and so does understanding the business behind them.

EU AI Act. GDPR. EU CTR. Data governance. Vendor contracts. If getting it wrong means exposing your organisation to liability, that is where I come in.

Sector depth across regulated industries. Eight years of hands-on legal practice. And a deliberate commitment to clear communication.

You will always know what the issue is, what your options are, and what to do next.

Senior expertise delivered directly. No large firm overhead.

Founder of Regulyn Ltd.
Co-author of Navigating Compliance: Strategic Guidance for SMEs under the EU AI Act (Springer Open Access).
Fluent in Finnish and English.

If you have a compliance challenge that needs senior expertise, send me a message.

Languages

Finnish
Native or bilingual
English
Native or bilingual
Swedish
Conversational

Workplace preferences

Remote only

Primarily works remotely

Regulyn Ltd.
Head of AI & Data Protection - Lead Consultant
September 2025 - Today (9 months)
Advisory services in data protection, AI governance, and high-value contracting to institutional clients with annual budgets exceeding €1 billion.

Governance: develop and support implementation of data protection and AI frameworks across complex, fast-paced environments (life sciences, R&D, tehchnology)
Strategic Guidance: providing clear expert guidance to senior leadership and other stakeholders on data protection, AI and responsible data use
High-Value Contracting: negotiation and drafting high-value contracts, such as clinical trial agreements
Risk and Incident Management: identifying key data protection risks, surfacing novel risks (e.g. AI-related), supporting incident management
Training: developing training programs to educate staff and leadership on data protection and responsible data use.
Keywords: EU AI Act, GDPR, MDR, Clinical Trials, AI Governance, Privacy, ISO 27001, ISO 42001.
EU AI Act GDPR ISO 27001
Tampere University
AI & Data Protection Lead Counsel - Chief DPO
January 2024 - September 2025 (1 year and 8 months)
Led AI and data protection regulatory compliance at a Finnish university conducting world-class research.
Global governance: oversaw AI & data protection regulations and policy development (ISO 42001) across global research initiatives and administrative functions
Strategic Guidance: providing expert guidance on AI and data protection regulations to internal stakeholders
High-Value Contracting: legal lead for a 40+M R&D semiconductor project, complex technology transfers and clinical trials
DPO responsibities: lead data protection team, oversaw reporting, risk assessments and incident management. Acted as liason for the DPA and data subjects.
EU AI Act ISO 27001 ISO 42001 artificial intelligence
Wellbeing Services County of North Savo
Data Protection & Research Lead - Senior Counsel
January 2021 - January 2024 (3 years)
Led global compliance across one of Finland’s largest public healthcare providers (12K+ employees) during a national structural reform.

Global governance: oversaw data protection and R&D regulations and policy development (ISO 27001) across R&D, patient care and administration
Strategic Guidance: providing expert guidance on data protection, R&D regulation and contract risks to internal stakeholders
High-Value Contracting: legal lead for a research agreements and framework agreements, 80+M procurement project’s portfolio and clinical trial agreement negotiations
Change Management and Development: developed data protection program, processes and templates for a newly established healthcare provider
Collaboration: collaborated closely with senior leadership, IT and external partners to ensure integrated approach