About the IAPP

Nora Santalu is an associate in the privacy and data protection team in London. She advises on the GDPR, the EU AI Act as well as ePrivacy rules. She has many years of experience in advising on: various types of biometric tools (identifying and non-identifying) used in different contexts and their regulation under both the GDPR and more recently under the EU AI Act, automated decision making tools, fraud prevention, and data brokering arrangements.

She was on the expert panel of the European Parliament in May 2024 on the regulation of biometrics in the EU. She has been cited by Harvard Cyberlaw Clinic's Memorandum on their recommendations for the regulation of biometrics in the state of Vermont and in the International Journal of Applied Engineering & Technology. Before joining Bird & Bird, she spent three years working in the financial services industry.