About the IAPP

Muhammad is a Manager within the Consulting practice of EY, where he spent more than 15 years in technology-related assurance, risk, and technology consulting. He has extensive experience in information and IT security, and for the past 9 years, he led various projects relating to data privacy and data protection. He assisted clients in performing gap assessments, assurance-type audits and end-to-end/targeted implementation activities of data privacy and data protection frameworks. His experience covers the Generally Accepted Privacy Principles, the Mauritius Data Protection Act 2004, the European Union Data Protection Directive, the European Union General Data Protection Regulation, the Mauritius Data Protection Act 2017 and more recently, the newly enforced South Africa Protection of Personal Information Act. He is also at the forefront with respect to analysing the evolving data protection landscape and related laws in countries within Africa and the Middle East.

His experience working with clients spans multiple geographies and touching large, medium, and small sized organisations in over 20 industry sectors. He has worked with clients across the Americas, Europe, Africa, and Asia-Pacific.

Muhammad has a bachelor’s degree in computer science and is a Certified Information Systems Auditor (ISACA). He also holds a number of certifications relating to information security and business continuity management.