Lori Baker

Vice President, Data Protection & Regulatory Compliance, Dubai International Financial Centre

Lori is an experienced attorney with expertise in data protection and regulatory compliance, as well as broad practice in commercial contracting. She is qualified in both the USA (in the states of New Jersey and Pennsylvania) and the UK, and is a Fellow of Information Privacy as certified by the International Association of Privacy Professionals. Lori now provides data protection and security strategy and support in one of the leading financial centers in the MEASA region, while in her own time she writes and speaks on various data protection and compliance topics.

Prior to relocating to Dubai in 2016, Lori was based in London, UK for 10 years, having worked most recently for Fieldfisher LLP in the technology and outsourcing team as a senior privacy and cybersecurity associate. She held in-house roles as Senior Compliance and Privacy Counsel at Dun & Bradstreet, Head of Ethics and Compliance at Orange Business Services and Global Regulatory/Privacy Specialist at BT Global Services.

Lori attended DeSales University, receiving a Bachelor of Arts in politics with a minor in philosophy, followed by Widener University School of Law (the Delaware Law School), where she was awarded a Juris Doctor with an emphasis in international business transactions. While at Widener, Lori enrolled in the Geneva International Law Institute, directed by instructors from the WTO, the UN and other international organisations.

Jose Sutton Belarmino II

Deputy Privacy Commissioner, National Privacy Commission of the Philippines

Atty. Jose Amelito S. Belarmino II is an experienced privacy lawyer with extensive expertise in data protection and regulatory compliance.

He holds a Bachelor of Arts in Speech Communication (Magna Cum Laude) from the University of the Philippines – Diliman and a Bachelor of Laws from San Beda University – College of Law. In 2021, he was awarded the prestigious Chevening Scholarship, which enabled him to complete a Master of Science in Cybersecurity and Digital Forensics (with Distinction) at the University of Westminster. During his time there, he also received the Personal Development Award in recognition of his outstanding academic and professional achievements.

Atty. Belarmino has built a distinguished career in both public service and the private sector. He previously served as Head Executive Assistant to the then first Privacy Commissioner and Chairman Raymund Liboro and later as OIC Executive Director of the National Privacy Commission (NPC), where he played a pivotal role in shaping the country’s data privacy framework and programs. His contributions include the establishment of the Data Privacy Council, advancing the Philippines’ active participation in the Global Privacy Assembly (GPA) and the Asia Pacific Privacy Authorities (APPA), and facilitating the country’s inclusion as a member of the APEC Cross-Border Privacy Rules (CBPR) System, among others. These initiatives have strengthened the Philippines’ position in the global privacy landscape and enhanced its collaboration with international data protection authorities.

Before rejoining the NPC as Deputy Commissioner, he served as Director of Global Privacy for Europe, the Middle East, and Africa (EMEA) at Marriott International, the world’s largest hotel chain. In this role, he was responsible for critical aspects of global privacy compliance, including privacy impact assessments, data protection impact assessments, individual rights requests, regulatory inquiries, and records of processing activities, among others.

He is a passer of both the Philippine Bar and the California Bar. He is also a bar and MCLE lecturer, covering subjects such as data privacy, the E-Commerce Act, and the Access Devices Registration Act.

As Deputy Commissioner of the NPC, he brings deep institutional knowledge and extensive experience in data privacy and security. He is committed to fostering regulatory innovation while ensuring the responsible use of personal data in the digital age.

Alain Herrmann

Commissioner, National Commission for Data Protection of Luxembourg

Alain Herrmann is Commissioner at the Luxembourg National Commission for Data Protection (CNPD), where he oversees the Compliance, Communication and Knowledge, and Artificial Intelligence, Innovation and Technologies divisions. His work focuses on AI governance, responsible innovation and the implementation of European digital regulatory frameworks. He is actively contributing to preparing the CNPD for its responsibilities under the EU AI Act. Before joining the CNPD in 2012, he worked in the private sector in information technology and information security.

Yeong Zee Kin

Senior Fellow, Global, FPF

Mr. Yeong Zee Kin is the Chief Executive of the Singapore Academy of Law, a promotion and development agency for Singapore’s legal profession. A globally recognized expert in AI ethics, he spearheaded Singapore’s Model AI Governance Framework which won the UNITU WSIS Prize in 2019 and was a member of the AI Group of Experts at the OECD (AIGO), which developed the OECD Principles on AI that were endorsed by the G20 in 2019. Zee Kin has tapped on his expertise in various areas of the law to contribute widely to various legal publications, including Data Protection Law in Singapore and Law and Technology in Singapore. He also authored Technology Regulation in the Digital Economy, which was launched at TechLaw.Fest 2023.

Zee Kin holds a Master of Laws from Queen Mary University of London and completed his undergraduate law degree at the National University of Singapore. His experience as a Technology, Media and Telecommunications lawyer spans both the private and public sectors, marked by his extensive expertise in areas relating to electronic evidence and intellectual property, as well as legal issues relating to Blockchain and AI deployment.

Zee Kin spearheaded the development of Singapore’s Model AI Governance Framework, which won the UNITU WSIS Prize in 2019. He is currently a member of the OECD Network of Experts on AI (ONE AI). In 2019, he was a member of the AI Group of Experts at the OECD (AIGO), which developed the OECD Principles on AI. These principles have been endorsed by the G20 in 2019. He was also an observer participant at the European Commission’s High-Level Expert Group on AI, which fulfilled its mandate in June 2020.

A well-regarded expert in various fields of the law, including AI, data privacy and ethics, Zee Kin has contributed heavily to legal literature. He has published chapters in Data Protection Law in Singapore and Law and Technology in Singapore. His latest book, Technology Regulation in the Digital Economy, provides a comprehensive overview of telecommunications, net neutrality, online intermediary regulation, cross-border data transfers, and evolving international and domestic laws governing data access and use.

Haksoo Ko

Senior Fellow, Global, FPF

Dr. Haksoo Ko is a Professor at Seoul National University School of Law in Seoul, South Korea. He is renowned as a leading scholar in legal and policy issues concerning data privacy and artificial intelligence.

He served as Chairperson of South Korea’s Personal Information Protection Commission (PIPC) from 2022 to 2025, overseeing critical developments in the country’s data protection landscape. Internationally, he made contributions as a member of the Executive Committee of the Global Privacy Assembly between 2023 and 2025 and participated in the UN’s High-Level Advisory Body on AI between 2023 and 2024. He is currently a Fellow of the National Academy of Engineering of Korea (NAEK). His expertise bridges the domains of law, economics, and technology, reflecting a rare combination of ministerial-level policy experience and interdisciplinary academic accomplishment.

Throughout his career, Dr. Ko has held numerous advisory positions for the Korean government and for a variety of public and private organizations around the globe. His public service, especially in technology-related areas, has earned him distinguished honors including a Service Merit Medal and a Presidential Citation from the Korean government. For his academic contributions, he was awarded an Alexander von Humboldt Foundation Fellowship for Experienced Researchers as well as a Google Faculty Research Award.

As an academic, he primarily teaches areas in Law and Economics as well as in Data Privacy and Artificial Intelligence Law. Prior to joining academia, he practiced law with law firms in both New York and Seoul. His leadership roles have included serving as President of the Asian Law and Economics Association; President of the Korean Law and Economics Association; President of the Korean Association for AI and Law; Co-director of SNU AI Policy Initiative (SAPI); and Associate Director of SNU AI Institute. He has held visiting appointments at distinguished institutions such as UC Berkeley, University of Hamburg, Vrije Universiteit Brussel, University of Freiburg, and National University of Singapore. He earned his BA in Economics from Seoul National University, and both JD and PhD in Economics from Columbia University.

Bilal Mohamed

Policy Manager for India, FPF

Bilal serves as a Policy Analyst for FPF’s Global Privacy Team and is based in India. He will focus on monitoring and analyzing developments related to the implementation and enforcement of India’s Digital Personal Data Protection Act, as well as tracking advancements in adjacent policy areas such as artificial intelligence regulation.

Prior to joining FPF, Bilal played a key role in supporting the Office of the Minister of State for the Ministry of Electronics and Information Technology, Government of India. At the Ministry, he contributed his expertise in legal and policy research, focusing on areas such as data protection, platform regulation, and online gaming.

He has also worked as a researcher at the Centre for Communication Governance (CCG), National Law University Delhi, and the Aapti Institute. While at CCG, he authored policy responses, research reports, and blog posts on issues surrounding data governance and intermediary liability. At Aapti, his research focused on the role of data stewardship models in enhancing the socio-economic value of data while preserving community privacy rights.

Bilal holds an LL.B (Honours) degree from the University of Edinburgh, where his undergraduate thesis focused on defining the contours of India’s constitutional right to privacy. He was also a 2021 Daksha Technology Law and Policy Fellow.

Dominic Paulger

Deputy Director for Asia-Pacific and China, FPF

Dominic is a Policy Manager in the Future of Privacy Forum’s Asia Pacific and China (APAC) office, where he conducts research and analyzes key trends in law, regulation, and policy relating to data protection, privacy, and emerging technologies in APAC and leads FPF’s projects and activities across the region.

Prior to joining FPF, Dominic worked in Amazon Web Services’ Global Public Policy team, where he developed strategic advocacy positions and materials to educate policymakers on a wide range of issues relating to data and the digital economy in Asia. He was also a research assistant for Dr. Clarisse Girot at the Asian Business Law Institute (ABLI), where he contributed to a major publication on legal convergence for cross-border transfers of personal data in Asia: “Transferring Personal Data in Asia: A path to legal certainty and regional convergence.” Dominic earned a J.D. from Singapore Management University and a B.A. from King’s College, London.”

Stephen Reynolds

Professor at Law, Indiana University School of Law

Stephen Reynolds (CIPP/US, CISSP), a partner at McDermott Will & Emery, advises some of the largest companies in the world on complex data security and privacy matters.

He frequently advises clients on complex matters involving data privacy and security laws and serves on the board of directors of the IAPP. Stephen’s expertise adds value to organizations by mitigating cyber threats through proactive preventative measures and navigating complex litigation on behalf of clients in data privacy and security.

As a former computer programmer and IT analyst, Stephen is uniquely able to and routinely uses his computer background in cases involving data privacy and security, electronic discovery, social media discovery, and computer forensics. Stephen has given several presentations on data privacy and security, electronic discovery and social media discovery, and is a Certified Information Privacy Professional. In addition to being a Certified Information Systems Security Professional (CISSP), Stephen teaches CISSP classes as a Direct Instructor with the (ISC)2.

Additionally, Stephen teaches a course on Data Security and Privacy Law at The Indiana University’s Robert H. McKinney School of Law.

Raktima Roy

Privacy and AI Counsel, International Finance Corporation, World Bank

Bio Forthcoming

Varun Sen Bahl

Lawyer and Tech Policy Researcher

Varun Sen Bahl is a lawyer and technology policy researcher based in New Delhi. He brings over eight years of experience advising and working with technology companies, government departments, international organizations, non-profits, and research institutes on the regulation and governance of digital and emerging technologies. Most recently, he worked at the Future of Privacy Forum as a Global Privacy Summer Fellow in Washington, D.C., and as a Public Policy Manager at Nasscom, India’s largest tech trade body, where he led the portfolio on data protection, artificial intelligence, and digital governance. He began his career working at a leading law firm specialising in technology policy and legislative drafting in India. He holds a B.A., LL.B. (Hons.) from the National Law School of India University, a Master of Public Policy at Duke University, and is a Certified Information Privacy Professional/Europe (CIPP/E).

Karishma Sundara

Founder , Kintsugi Law

Karishma Sundara is the Founder of Kintsugi Law, a boutique Indian technology, media, and telecommunications law practice. For over a decade, she has advised leading global and domestic clients across sectors — including social media, online gaming, e-commerce, edtech, fintech, and healthcare — on complex technology law issues. Her work spans the launch and expansion of technology offerings; constructive regulatory engagement on privacy, content liability, and cybersecurity issues; and high-impact privacy, fintech, and content litigation before the Supreme Court of India and other judicial fora. Well regarded for her privacy law expertise, Karishma has contributed to India’s evolving data protection framework by supporting key representations on successive drafts of the law. In the lead-up to implementation of the Digital Personal Data Protection Act, 2023, she routinely advises clients on compliance strategy, risk, and operational readiness. She also regularly guides clients on cybersecurity preparedness and incident response, AI governance, and other emerging technology issues. A frequent contributor to thought leadership in this space, she has served on planning committees for Indian privacy conferences, including Bharat Privacy. Karishma holds a BA (Hons) in Law from the University of Cambridge and an MA (Hons) in English Literature from the University of Edinburgh. Before founding Kintsugi Law, she was a Counsel at Trilegal, a leading Indian law firm.

Steve Tan

Partner (TMT), Rajah & Tann Singapore LLP

Josh Lee Kok Thong

Managing Director for APAC, FPF

Josh is deeply passionate in the issues at the intersection of law, policy and technology, and is a changemaker in the spheres of the law of tech, and the tech of law.

As a legal architect that hopes to re-shape relationships disrupted by technology, Josh is the Managing Director, Asia-Pacific of the Future of Privacy Forum. In this role, he leads a team furthering FPF’s mission of advancing data protection best practices and the trusted development and use of emerging technologies in the region.

Josh received his LL.M. from the University of California, Berkeley, School of Law in 2022, where he was named to the Dean’s List for his academic achievements. Josh was also a Richard Buxbaum International Graduate Fellow and a White & Case Kathryn Aguirre Worth Scholar. An active contributor to Berkeley Law’s student body, Josh served as the LL.M. Editor of the Berkeley Technology Law Journal and co-founded B-LIT, Berkeley’s first legal innovation student organisation.

Before postgraduate studies, Josh served for half a decade in the Singapore Government. More recently, he was the Legal Policy Manager for Artificial Intelligence (AI) Governance in Singapore’s Personal Data Protection Commission, where he managed Singapore’s overall AI governance policies. Before that, Josh was an Assistant Director for Legal Policy in the Ministry of Law, where he drove criminal and civil legislative reform, particularly in technology and online harms. He also practiced as an international arbitration lawyer in a large Singaporean law firm.

As a driver of the tech of law, Josh is the first Chairperson of the Asia-Pacific Legal Innovation and Technology Association (https://alita.legal), a pan-regional industry platform driving legal innovation and technology initiatives in the region. Josh also co-founded LawTech.Asia (https://lawtech.asia) and etpl.asia, organizations that advance thought leadership on law and technology in Asia. In 2019, Josh was identified by Asia Law Portal as one of Asia’s Top 30 Persons to Watch in the business of law.

In addition, Josh is a member of Singapore’s Law Reform Subcommittee for Robotics and AI, where he authored a law reform report on “Criminal Liability, Robots and AI Systems”.  Josh was also a chapter co-author of Law and Technology in Singapore, which was edited by Professor Simon Chesterman, Professor Goh Yihan, and Judge of Appeal Andrew Phang. Given his keen interest in new technologies like AI and its potential impacts on society and governance, Josh is also a voting member of the IEEE P2863 Working Group on Organisational Governance of AI Systems, and holds research roles in the National University of Singapore and the Singapore Management University. He speaks regularly at conferences and dialogues in the law of tech and tech of law ecosystems.

Monika Tomczak-Górlikowska

Group Head of Privacy, Digital and Regulatory, Prosus and Naspers

Monika Tomczak-Górlikowska is the Global Head of Privacy, Digital & AI governance for the Prosus Group – a multinational consumer internet group with headquarters in Europe and one of the largest technology investors in the world. Monika also serves as a member of the Board of Directors of the IAPP. Monika began her career at the Legal Service of the General Secretariat of the Council of the EU in Brussels. She is now based in Amsterdam and previously was the Senior Data Privacy Legal Counsel at Shell International Limited in London. Monika is a licensed attorney (adwokat) with over 25-years in practice. Prior to her in-house tenures she was in private practice, including at the offices of Miller, Canfield in Poland. She holds a Master of European Law degree (LLM cum laude) from the Law Department of the College of Europe in Brugge (Belgium). Monika has also served as Co-Chair of the Steering Committee of the Forum on International Privacy Law and a member of the IAPP European Advisory Board. Monika is also hexalingual: she speaks English, French, Spanish, Italian, Polish and Portuguese fluently.

Denise Wong

Commissioner, Personal Data Protection Commission of Singapore

Bio Forthcoming