Summary
Overview
Work History
Education
Skills
Websites
Other Information
Languages
Officialqualifications
Dataprocessing
Barassociation
Personal Information
Timeline
Generic
MONTSERRAT SALA MORERA

MONTSERRAT SALA MORERA

Barcelona,B

Summary

Lawyer specialized in Data Protection & Privacy | Information Technology | Digital Law with more than 8 years of experience advising public and private entities.

Energetic and analytical. Possesses solid understanding of legal RGPD procedures and document drafting, coupled with robust problem-solving skills. Committed to delivering high-quality legal support and contributing to successful case outcomes.

Overview

10
10
years of professional experience

Work History

Associate Lawyer – CIPP/E

FIELDFISHER LAW FIRM
01.2021 - Current
  • Data Protection Associate Lawyer providing support directly to the DPO of 'la Caixa' Banking Foundation, an entity that promotes initiatives in the Social, Cultural, Educational, Scientific or Research fields.
  • Advice on personal data protection (GDPR and LOPDGDD), regulations of information society services and electronic commerce (LSSICE), electronic signature (R.EIDAS) and the new Regulation of the AI ACT.
  • Tasks: updating the register of processing activities (in OneTrust); meetings of the Data Protection Committee; Guiding and influencing stakeholders to ensure privacy compliance on business from a legal and technical perspective.
  • Enforcing and guiding teams to develop products based on Privacy by design.
  • Acting as a key contact to answer privacy-related queries, issues or concerns.
  • Developing and promoting data protection awareness and training programs.
  • Conducted thorough legal research to support informed decision-making and develop winning case strategies.
  • Managing relationships with supervisory authorities and data subjects.
  • Drafted clear and persuasive legal documents, including pleadings, briefs, motions, and contracts.
  • Carrying out Data Protection Impact Assessments under Article 35 GDPR; Conducting Legitimate Interest Assessments.
  • Management of the answers for the individual rights PLARCO.
  • Management of security breaches.
  • Continuous analysis of the privacy framework and its effectiveness (managing risks, technical controls, policies, and processes) in managing internal audits

Lawyer

ECIJA & ASSOCIATES LAWYERS BARCELONA
01.2019 - 09.2021
  • Acting as external Data Protection Officer (DPO), through ECIJA, for different public and private clients: 'la Caixa' Banking Foundation, Médecins Sans Frontières (Doctors Without Borders), ACCIÓ (Agency for Business Competitiveness - Generalitat de Catalunya) and others.
  • Advice on personal data protection (RGPD and LOPDGDD) for national clients, both public and private.
  • Advice on regulations of information society services and electronic commerce (LSSICE).
  • Tasks: GDPR implementation projects; analysis of planned new projects, review of personal data processing contracts, advice for international data transfers; conducting data impact assessments; review of internal policies and procedures; interviewing department heads; updating records of processing activities; drafting privacy policies; drafting cookie policies; drafting internal guidelines; personal data breach notifications or incident analysis, training employees on GDPR regulations, etc.

Junior Lawyer

PricewaterhouseCoopers (Pwc)
01.2017 - 08.2019
  • Acting as a junior lawyer specializing in personal data protection (RGPD/LOPD). My main task was to support the implementation of the RGPD regulation at the Cybersecurity Agency of Catalonia, an agency of the Generalitat de Catalunya.
  • Advising in Telecommunications law; Electronic signature and digital identity (eIDAS); Information security in e-Government and Advising in ISO 27001.

Junior Lawyer

URECA-Legal
01.2016 - 06.2017
  • Support in data protection audits for different City Councils in the Province of Barcelona;
  • Drafting of security documents, preparation of data processor contracts
  • Preparation of training courses on data protection for employees of the entities
  • Study and adaptation to public and private entities of the regulation of the European Data Protection Regulation
  • Adaptation of online businesses to the LOPD and LSSICE regulations
  • Study, legal advice and drafting of reports on Intellectual and Industrial Property matters

Legal Consultant

BELLAVISTA LEGAL
01.2015 - 01.2016
  • Management of the portfolio of trademarks, designs and patents at national and international level; monitoring of rights; preparation, filing and prosecution of applications; maintenance of rights; transfers; oppositions; defenses and responses to official objections
  • Advice on copyright, protection and registration of computer programs
  • Implementation of the LOPD: drafting of Security Documents and filing of company files with the Spanish Data Protection Agency

Education

AI GOVERNANCE CERTIFICATION - AI ACT REGULATION

AI, TECH & PRIVACY ACADEMY
EEUU
02-2025

Privacy Regulation

IAPP - International Association Privacy Professio
Barcelona
06-2024

Data Protection Officer Certificate - Privacy Law

ISMS FORUM – AEPD
Barcelona
06-2021

Master's Degree in Access to the Legal Profession -

University of Barcelona
01.2016

Master's Degree in Intellectual and Industrial Property -

Barcelona Bar Association
01.2015

Degree in Law -

University of Barcelona
01.2015

Skills

  • RGPD and Privacy Legal Advisor
  • Digital EU Legal Advisor
  • Legal research
  • Contract drafting
  • Organizational skills
  • Adaptability and flexibility
  • Active listening
  • Continuous improvement
  • Contract review and negotiation
  • Teamwork and collaboration
  • Creative and critical thinking
  • Problem-solving abilities

Other Information

  • Speaker at the Privacy Panel organised by One Trust., 01/21
  • Driving licence type B.

Languages

Spanish
Catalan
English

Officialqualifications

  • CAE - Certificate in Advanced English, C, C1, 07/01/15
  • FCE - First Certificate in English, B, B2, 05/01/13

Dataprocessing

  • Regular user with knowledge of Microsoft Office: Word, Excel and PowerPoint.
  • Knowledge of Salesforce, OneTrust, Confluence, JIRA, Globalsuite, Apiges and Synergy software.

Barassociation

45.648

Personal Information

  • ID Number: 78100573-W
  • Date of Birth: 01/06/92

Timeline

Associate Lawyer – CIPP/E

FIELDFISHER LAW FIRM
01.2021 - Current

Lawyer

ECIJA & ASSOCIATES LAWYERS BARCELONA
01.2019 - 09.2021

Junior Lawyer

PricewaterhouseCoopers (Pwc)
01.2017 - 08.2019

Junior Lawyer

URECA-Legal
01.2016 - 06.2017

Legal Consultant

BELLAVISTA LEGAL
01.2015 - 01.2016

Master's Degree in Access to the Legal Profession -

University of Barcelona

Master's Degree in Intellectual and Industrial Property -

Barcelona Bar Association

Degree in Law -

University of Barcelona

AI GOVERNANCE CERTIFICATION - AI ACT REGULATION

AI, TECH & PRIVACY ACADEMY

Privacy Regulation

IAPP - International Association Privacy Professio

Data Protection Officer Certificate - Privacy Law

ISMS FORUM – AEPD
MONTSERRAT SALA MORERA