Punit believes in the power of data and the value it can create for customers when used responsibly. He advocates protecting privacy while also enabling organizations to unlock data’s potential through emerging technologies like AI and quantum computing. For him, innovation and privacy go hand in hand in building lasting trust.
Recognized as a thought leader in data privacy and AI, Punit blends strong technical expertise with a passion for responsible innovation. His work emphasizes that trust is the foundation of any successful data-driven strategy, and he is known for bridging the gap between compliance and business needs.
As Privacy and Protection Officer at ING Group and Global Privacy Manager at Stanley Black & Decker, he played a key role in developing and implementing GDPR frameworks. These efforts shaped privacy governance across multiple countries, helping organizations meet regulatory demands while maintaining efficiency.
In recent years, Punit’s focus has increasingly turned to AI and its governance. He has defined policies that guide ethical and effective AI use for both large enterprises and smaller businesses in Europe, ensuring that organizations can innovate confidently while safeguarding individual rights.
He is the author of books on privacy, a guest lecturer at the Solvay Business School and the founder of Fit4Privacy.
Defined privacy vision and strategy for ING Group, aligning retail and wholesale operations across countries.
Crafted a GDPR implementation framework and ran workshops to build shared understanding and objectives.
Developed data portability guidelines privacy statements and led large-scale privacy impact assessments.
Delivered GDPR training to over 250 plus staff and collaborated closely with Deloitte on privacy risk remediation, where they adopted his strategy as their own to be spanned across other companies.
For a healthcare company, guided the board & management on the applicability of the EU AI Act, trained management, defined AI use, built policies, and established AI governance. Now, mapping to ISO 42001 and defining controls, and additionally, executing the plan to become EU AI Act compliant and ready.
