About the IAPP

Nora Santalu is a senior associate in the privacy and data protection team of Bird & Bird in London. She advises on the GDPR, the EU AI Act. She has years of experience in advising on various types of machine learning algorithms' use especially biometric tools (identifying and non-identifying) used in different contexts and their regulation under both the GDPR and the EU AI Act, automated decision making tools, fraud prevention, and data brokering arrangements. She was on the expert panel of the European Parliament in May 2024 on the regulation of biometrics in the EU. She has been cited by Harvard Cyberlaw Clinic's Memorandum on their recommendations for the regulation of biometrics in the state of Vermont and in the International Journal of Applied Engineering & Technology as well as the Global Public Policy Institute and Organisation for Security and Cooperation in Europe.