01
Privacy
Privacy management that connects legal obligations to practical controls, accountable decisions, and defensible evidence.
Data governance · law · technology
LGLNOW brings together practical insights and professional learning in privacy, data governance, cybersecurity compliance, responsible AI and digital accessibility. By Imran Chowdhury.
5
Integrated governance disciplines
1
Connected approach to Data Trust
3
Degrees across law, technology & business
01
Profile
Effective governance is more than a collection of policies, assessments and compliance records. It should help people understand what responsible action looks like, make better decisions and demonstrate that important controls are operating as intended.
My approach connects obligations, risks, controls, accountability and evidence. It draws on legal reasoning, technology understanding and business execution to develop governance systems that can operate across complex organizations.
The objective is not compliance for its own sake. It is to protect rights, support organizational missions and strengthen trust in the way data and digital technologies are governed.
At my current organization, I lead an integrated portfolio covering Privacy, Data Governance, Cybersecurity Compliance, Responsible AI, and Digital Accessibility. The context is distinct: a global media organization where rights, public interest, technology, speed, and editorial independence must coexist.
My approach combines legal reasoning, technical fluency, and operating-model design. I build governance as infrastructure: clear ownership, usable policy, proportionate controls, traceable decisions, and evidence that stands up to scrutiny.
Juris Doctor
BSc, Computer Science
MBA, Project Management
Former McKinsey & Deloitte
02
Expertise
One portfolio. Five connected disciplines.
01
Privacy management that connects legal obligations to practical controls, accountable decisions, and defensible evidence.
02
Enterprise data structures that make ownership, classification, quality, retention, and responsible use operational.
03
Integrated assurance that turns security standards and regulatory duties into coherent, testable control environments.
04
Governance for AI that balances innovation with human oversight, transparency, risk management, and fundamental rights.
05
A rights-led approach to accessible digital experiences, embedded into governance, delivery, and assurance.
03
Selected work
Selected transformations
Case study
Connecting laws, standards and internal requirements to accountable controls and evidence through an integrated framework that preserves meaningful differences.
Case study
Building a connected operating model for privacy, data governance and cybersecurity compliance within a multinational media environment.
Case study
Extending established governance to responsible AI and digital accessibility through clear accountability, proportionate review and evidence.
04
Insights
Selected thinking

Pope Leo XIV supplies the principles, Prince Zeid and Prince Ghazi supply the scepticism, and Data GRC supplies the machinery. Why AI oversight has to cross borders, and…

A principle you cannot evidence is a press release. How to turn transparency, fairness and accountability into control objectives, named owners and artifacts — plus the minimum evidence…

A long read for privacy, cybersecurity and AI governance professionals — September 2026 In the same week that the chief executives of three of America’s leading AI laboratories…
05
Working principles
My operating philosophy
01
Build obligations into systems and decisions—not around them.
02
Design every control so its operation can be understood and demonstrated.
03
Apply rigor where risk demands it, without slowing responsible work.
04
Protect people while respecting the realities of journalism and media.
You must be logged in to post a comment.