Tania Sandler

Legal expertise in new technologies: digital laws and EU legal framework on data protection and privacy. Contributing to enhance the collaboration between the Supervisory Authorities in the European Economic Area (EEA) and to support them on different stages of their investigation and enforcement activities in the field of data protection law.

I support innovative projects across businesses of all sizes - from growth companies to matrix organizations - while protecting individuals’ rights by enhancing compliance with GDPR and other privacy-related regulations. I deliver strategic and hands-on services, including: GDPR audits, GDPR monitoring, incident management, risk management, tailored GDPR training, and the drafting of various privacy-related documentation : privacy policies and notices, incident response/data breach protocols, records of processing activities, DPIAs, DPAs, DTIAs… As the Founder of Advokatfirma Sandler Privacy Legal (formerly NICG), a dedicated boutique Data Law Firm, I am committed to turning complex legal requirements into clear, actionable steps aligned with your business goals. With a strong vision to build and uphold robust data protection frameworks, I help clients mitigate privacy risks, strengthen cybersecurity resilience, and foster a responsible data culture. By transforming privacy compliance from a regulatory burden into a strategic advantage, I empower businesses to innovate at speed, embrace cutting-edge technologies like AI with confidence, foster consumer trust, and optimize costs. For more information, visit: www.sandlerprivacylegal.com

In line with the General Data Protection Regulation (GDPR), I ensured that the GDPR requirements were met by the Nordic Credit Bureau businesses on an ongoing basis, safeguarding personal data. As a 2nd line of Defense role, I advised the business and provided compliance awareness. I acted as an intermediary between the regulator, the data subjects (consumers and clients) and the local/regional management committees, coming with strategic advice to handle incidents and to foster ethical data use.

I guided the Business/Support Units (BU/SU) dealing with daily GDPR legal issues, such as: consent, legitimate interest, GDPR principles, consumers’ rights, transfer of data abroad (TIA), commercialization of personal data, aggregated data, data protection impact assessment (DPIA), privacy risk assessment and mitigating controls. As the DPIA process owner, I have designed and operationalized the DPIA process in the Bank and created a DPIA SharePoint site. This site provided an operational knowledge basis and an operational platform with tools and guidance to help the stakeholders carrying out their DPIAs. I have contributed to design and initiate a GDPR training Group wide strategy and provided the DPIA training material for DNB Norway and DNB International (around 200 participants).

As a legal adviser, I provided expertise in business law: privacy, contract law, choice of legal structures, immigration rules. I acted as an external data protection officer (DPO). As a business developer, I advised companies in their international development strategies, and I assisted French-based and Norwegian-based companies in finding new opportunities and entering in the Norwegian and French market.

I taught French: all grades, upon request

I organized social events to promote the Norwegian industry in France. I contributed to the Chamber’s global communication efforts, taking part to the preparation of the French-Norwegian newsletter and magazine, to the networking and to the implementation of the annual activity plan.

I successfully negotiated and drafted the international cooperation agreements regarding the creation of a cross-border hospital between France and Spain (in Puigcerda). I was the coordinator of the European dispute cases of the Department. I was appointed as a project manager for the creation of an intranet website on the European Union and invited by the Head of the Department to share the result of my project in front of the General Assembly of the Ministry (300 people).

In this general practice law firm, I provided legal assistance to both individuals, entrepreneurs, start-up and small to mid-size companies from all kinds of sectors in a various range of legal issues. It encompassed in particular data protection law with compliance to EU and French laws, labor and employment law (drafting employment contracts, liability and actions regarding mobbing as well as discrimination in schools and at work) and health law and litigation proceedings.

I contributed with my expertise in EU/EEA law and international regulations on biosecurity and food safety to numerous international and multidisciplinary projects within several International Organizations. I ensured the background documentation and drafted reports on legal, international, and trade aspects of modern food biotechnologies (WHO), biosecurity (FAO), and food safety issues and the precautionary principle (OECD). Additionally, I provided legal counsel on dispute cases in EU law (Council of the European Union).