Home

Interview with Olga Nielsen

Tech Lawyer and

Data Compliance Expert 

Who is Olga Nielsen?

I am a tech lawyer graduated from the University of Copenhagen, also holding a Market Economist degree from the Business Academy in Aalborg.This education provided a comprehensive understanding of the business world, including how to start a business, marketing, and accounting.


The business background has been helpful in the legal profession, particularly in advising and creating customized services for specific target groups.

Image

Which area of law caught your interest?

My introduction to the fields of data protection and information security happened while working on a significant project in the public sector, and this was prior to GDPR.This experience allowed me to understand the intersection of legal, information security, and organizational processes.A perfect combination I must say.

I had already a lot of experience and training due to my previous education and jobs.


So, I discovered my passion for this area; its complexity and multidisciplinary nature resonated deeply with me and suited my personality perfectly.Since then, I have continually pursued further education and training, finding that as the field has grown more involved, my interest and enthusiasm have only increased.

Have you always been an external consultant?

I transitioned rapidly from employment in the public sector to establishing my first consulting firm.

In 2016, I became the first Data Protection Officer (DPO) in Denmark to offer DPO as a Service.I take pride in this achievement, particularly because, at that time, few people understood the role of a DPO or were familiar with the General Data Protection Regulation (GDPR).


The concept of GDPR was known to some extent, but its exact implications and implementation methods were not widely understood.

Presently, many organizations still find it challenging to fully embrace and respect the role of a DPO, even those of considerable size.

Why self-employed?

I made a deliberate decision to alternate between being employed in-house and self-employment as a means of accelerating my learning curve.

This is how I felt to be the perfect solution for me.

Currently, I find that I have greater satisfaction from being self-employed.


Being hired to fix a problem in the organization is quite a challenge but also an amazing opportunity to apply years of experience, and see a final result of your advice or hands-on solutions – this motivates me a lot.

Image

What are the disadvantages of this job?

Well, like anything else, there are always pros and cons.Now it depends on how you want to look at it.

And in this profession, there are cons on both professional and personal sides.


The industry has changed a lot. I experience a lack of consultants that are engaged, not as much as me, I don’t expect that, but at least share the same passion. I appreciate a lot when through circumstances I find people with the same smile on their faces when talking about this field.

However, it is not only about the passion, it is also a lot about the level of expertise and not being accountable for the poor advice that is given out there. This trend often leaves companies with inadequate compliance guidance.

My advice for companies is to perform due diligence and hire insured professionals.


On a personal note, I experienced burnout.I have not spoken publicly about this, as it has been a challenging period in both my professional and personal life. 


What does your colleagues or clients say about you?

Better to read their own words:


“Olga is an open and warm person, whose human view embraces everyone. A special remark: Her sense of humor is fantastic! When chatting on coffee break, when just saying a quick hello while rushing from meeting to meeting or back from lunch break… And I miss her smile and sparkling laughter!”



“I have had the pleasure of working closely with Olga, and without a doubt, I can confidently say that she is the best DPO I have ever had the privilege of collaborating with.

Olga possesses an unparalleled set of skills that make navigating the complexities of GDPR seem effortless.

Her in-depth understanding of data protection regulations, coupled with her strategic approach, has made compliance not only achievable but also streamlined for the organisation.

What sets Olga apart is her ability to demystify the intricacies of GDPR, making it comprehensible and accessible to everyone. Her commitment to creating a culture of data privacy is truly commendable, and under her guidance, the organisation saw a remarkable improvement in our data protection practices.”



“Olga's approach to the tasks and collaboration in general was constructive, energetic, positive and visionary.”

Why a lawyer?

I decided to pursue a career in law at the age of 14 or 15, I don’t remember the exact age.But at that time I was also interested in a career in the army or police force.Something about law and being a lawyer has fascinated me.

So, I became a lawyer.

Later I found out through numerology that it was destined to be, I guess 😊

After completing five years at the university and becoming a lawyer, I recognized that my approach was distinct due to my business and work experience and my practical approach to complex areas. I do not align with the “traditional” perception of a lawyer.

Those who have collaborated with me understand what I mean.

If you are interested to find out, please feel free to reach out.

Image

Now I have more than 10 years of experience in the field of GDPR and InfoSec.I have worked among others with AI projects, data-driven marketing, and cookie compliance since 2018.Having my focus on the EU Digital Strategy, additional areas caught my interest: AI Act, NIS2, DORA, CER, Data Governance Act, Cyber Resilience Act, Data Act, Digital Services Act, European Health Data Space.I work with ISO-standards, NIST, CIS, ENISA standards.


Depending on the specific projects for which I am hired, either in an advisory capacity or as a hands-on project manager, I may also need to comply with other laws, including eIDAS, The Money Laundering Act, and the Public Administration Act.While my journey began with GDPR, it's not all about GDPR anymore.

Image

What are the advantages of pursuing a career in this field?

If you choose to work in this field, you can be very certain that you can’t get bored. This field is ever-evolving, and every single day there are many challenges and new opportunities to learn even more. You work from hands-on to strategic data compliance and work closely with the organization at every level.

Working in this field you will play a crucial role in safeguarding individuals’ personal data and ensuring organizational compliance with regulations.

This field is a multidisciplinary field, a mix of legal, technological and organizational aspects. You must stay updated with the latest developments and that helps your continuous learning and professional growth.

What are the benefits of this job and also being self-employed?

I value the flexibility to manage my time, select my projects, and choose my collaborations. The more complex area or project the more it motivates me. 


I experience increased motivation and job satisfaction by engaging in work that aligns with my personal interests, passions, and area of expertise. The necessity to remain engaged and continually improve my skills aligns well with my personality and current stage of life.

I now prioritize my own physical and mental health before saying yes to a project.

However, I must say that it has not always been this way.

It is often said that individuals do not leave their company or job, but rather leave due to poor management.

And maybe it is not always true. I guess we all have a responsibility for our own mental health.

It has been challenging for me to acknowledge burnout and follow my doctor's advice to take a break.Instead, I moved to another demanding in-house job and very soon after I found myself attending interviews for other positions.


It became increasingly evident that a personal transformation was essential for me to either continue in this field or explore other opportunities.

Although efforts were made to hide burnout from colleagues and contacts, the condition worsened. Therefore, it is important to listen to your body and recognize when it is necessary to take a step back.


It is acceptable to do so.I am thankful now that I’ve experienced that – I value everything much more than before. I exercise regularly and I meditate a lot.

I find those very helpful for my personal and professional life.

Any advice for aspiring professionals in this field?

First of all, it is not necessary to be a lawyer to work in this field.

But please, don’t just work in this field because it is trendy!

However, having a significant interest and dedication to this field is important to succeed.


Working in this field requires continuous learning and skill development, as well as extensive networking within and outside the organization.

There is much to consider in this field, and understanding GDPR alone is not sufficient for success.

This is what I always communicate to my mentees.


Naturally, this varies based on each individual's unique personality and aspirations.

Image

Included in the list of success stories: L'Oréal, DFDS, University of Copenhagen, the Danish Ministry of Taxation,

Dansk Industri, Sampension,

IN Groupe Denmark

Why work with me

Strategic Consultant, Master Practitioner, Invaluable Partner

Image
Image
Image

Strategic Consultant

I transfer complex challenges into actionable strategies, helping organizations making well-informed and risk-based decisions. 

Master Practitioner

Count on my personalized service focused solely on your goals, applying advanced knowledge for sustainable outcomes.

Invaluable Partner

Receive dedicated support at every step of the process with me by your side. Your success is my priority.

UNIQUE APPROACH

Insights, stories, and real talk from the world of data protection.


As a  seasoned Data Protection Officer (DPO) I produce and host "Confessions of a DPO", that offers listeners a behind-the-scenes look at the challenges, triumphs, and lessons learned in the ever-evolving landscape of data protection and compliance.


Each episode features candid discussions, experienced and newcommers guests, that share insights, perfect for professionals navigating the complex world of data protection.



Confessions of a DPO

Image

This project a non-profit project sponsored by Nordic Data Compliance Centre, a project that started in January 2025. 


Streamed in more than 160 countries by end of 2025, the podcast series will return in 2026 with "Confession of a DPO..and friends". 


Tune in here!

Tune in for:

  • Real-world advice from a DPO’s perspective.

  • Deep dives into data protection regulations and best practices.

  • Exclusive stories from the front lines of compliance.


Whether you're a seasoned professional or just starting your journey in data protection, "Confessions of a DPO"is your go-to source.


2025 Nordic Tour Highlights

FINLAND

MyDataGlobal Conference

"Compliance as a driver of ethical business and customer value for companies" and a training session "Incident management aligned with GDPR, NIS2 and DORA" were my contributions for this year's conference. A week of positive energy and inspiration, meeting beautiful people sharing same interests and values. 

Image

Sweden

Nordic Privacy Arena 

Live recording of a teaser episode of Confessions of a DPO podcast - this time with a topic alined with the NPA's theme:  “A Decade of Progress, A Future of Responsibility”

You can find the recording here, with important revelations and critical understandings from the younger generations, as well as invaluable knowledge from Swedish DPA. 






Image

Norway

North European Cyber Days  

What a week of different activities: a session on Secure Data Sharing in Practice, a panel discussion on Navigating Regulatory Requirements for NIS 2 Compliance in Healthcare and Critical Sectors and a Head of Jury that together with other Jury colleagues I helped select some of the most promising European cybersecurity start-ups.






Image

Partnerships

A huge milestone of signing the partnership ageement with PECB as well as becoming a certified trainer. 


PECB is a certification body dedicated to fostering digital trust through comprehensive education, certification, and certificate programs across various disciplines.

Training

Image
Image
Image
Image
Image

As the CEO and Managing Partner at Nordic Data Compliance Centre, I am looking forward to the membership with ECSO. Together, we can build a resilient and  strategically autonomous Europe.


Being a memberof ECSO(the European Cyber Security Organisation) means that you are part of an influential European network dedicated to advancing cybersecurityand digital securityacross the continent. ECSO is a nonprofit organization that brings together industry leaders, governments, academia, and other stakeholders to collaborate on improving cyber resilience, data protection, and digital infrastructure.

Being  a member of MyDataGlobal means actively contributing to a more ethical, transparent, and individual-focused approach to managing personal data.

It also means being part of a global community and network focused on promoting personal data rights, privacy, and data empowerment.


MyDataGlobal is an international nonprofit organization that advocates for human-centric data governance—meaning that individuals should have control over their own data and how it's used, shared, or sold.


We are deeply aligned with MyDataGlobal's commitment and we are proud to be a part of this incredible network. 

Image