Gurleen Kaur

Senior Privacy Program and Policy Analyst
Gurleen Kaur

Gurleen Kaur is a techno-legal data privacy professional with extensive experience in handling data privacy and protection engagements. Gurleen has assisted clients with a wide range of data governance, privacy, and advisory needs, with a particular focus on helping organizations in addressing the requirements of the EU General Data Protection Regulation (GDPR), data flow mapping using data-driven methodology, data retention, data discovery, reviewing and implementing privacy controls, and more.

At Venable, Gurleen is assisting with the data lifecycle management project for a social media platform, which includes supporting regulatory response documentation, internal and external audit operations, and other assessor-related reporting to comply with Federal Trade Commission (FTC) order.

Gurleen has experience across a multitude of industries in embedding privacy frameworks, performing current state assessments of privacy-related controls, and conducting privacy impact assessments to ensure that policies, products, and business processes comply with different regulations, including GDPR, POPI, LGPD, PDPA, CCPA, and the EU-U.S. Privacy Shield, among others. She has also designed policies and procedures, oversaw the legal hold and email exemption processes for top multinational companies in compliance with applicable laws and regulations, and provided end-to-end privacy assessments utilizing the One Trust tool.

Related Industries



  • LL.B. University of Petroleum and Energy Studies 2019
    • Specialization: Cyber Law
  • B.Tech. Computer Science and Engineering University of Petroleum and Energy Studies 2019
    • Silver medalist for standing first in order of merit
    • Commendation Letter for Exemplary Performance 

Professional Memberships and Activities

  • ISO 27701:2019 (PIMS)
  • ISO 27001:2013 (ISMS)
  • ISO 22301:2019 (BCMS)
  • One Trust Professional Certification
  • Certified Information Privacy Technologist (CIPT), International Association of Privacy Professionals (IAPP)