Ethical Data and AI Governance Advisor at DAMA Brazil, co-founder of Privacidade+, and Lead Auditor for ISO/IEC 27001, 27701, and 42001 standards. Three decades of experience at the intersection of technology, data, and law.
Our Journey
She spent over two decades at pharmaceutical multinationals such as Sanofi, Boehringer Ingelheim, and Merial, with assignments in Campinas, Lyon, and the United States. She led systemic integrations, M&A projects, and FDA and SOX validations before transitioning into the data protection field.
Currently a co-founder of Privacidade+, she works in Data and AI Governance at Keyrus and was appointed as the Ethical Data and AI Governance Advisor to the presidency of DAMA Brazil for the 2026-2028 term. Her strength lies in articulating technology and compliance, translating one field into the other and building high-performance teams.
Leading teams and initiatives in Artificial Intelligence Governance, focused on the integration of Data and AI Strategies, AI Agents, Trustworthy AI, and Data Sovereignty.
Acting as DPO as a Service (Data Protection Officer) and leading complex Risk Management projects (based on ISO 27005) and Change Management.
Leading data projects in the sugar-energy sector, using Artificial Intelligence and geolocation data.
As a member of the Leadership Committee, leading the redesign and transition of the IT team following a major global merger and acquisition (M&A).
Responsible for project portfolio governance, security, and compliance across 5 group companies, holding an executive seat on Brazil's steering committee for 3 years. Led the systems integration between Merial and Sanofi, managing a program with over 200 resources and 23 vendors for SAP implementations.
During the swap period (Sanofi-Boehringer), she was responsible for the Information Systems strategy and delivery models in Latin America, as a member of the Leadership Committee. She directed the Business Intelligence (BI) strategy, delivering practical analytical results to the regional sales force. In France, she managed a multicultural global team (USA, France, and India) on a Business Process Transformation project. She led Data Governance for ERP implementations and conducted budgeting and FDA validation projects (the US regulatory agency) in Latin America. She became IT leader for Brazil at the age of 24.
Managing the Year 2000 (Y2K) program, leading 8 simultaneous projects, in addition to working on data modeling and business glossary development.
Working as a developer (SQL, Progress) specializing in the construction of complex Data Modeling.
Thirty years in complex corporate environments have included tenures at some of the world's largest companies, projects across seven countries, and hands-on mastery of dozens of frameworks, standards, and platforms. The foundation of this work today is the strategic integration of these layers.
Structuring data as an organizational asset. Modeling, quality, lifecycle, roles, and responsibilities. Work anchored in the DAMA-DMBOK2 framework, tailored to the specificities of the Brazilian market.
AI management systems based on international standards. Trustworthy AI principles applied to real-world cases: responsible, fair, privacy-by-design, robust, explainable, and transparent.
LGPD and GDPR compliance programs with an integrated technical-legal approach. DPO as a Service, data processing mapping, legal basis determination, safeguards, and internal auditing.
A critical analysis of the infrastructure underpinning the data of Brazilian citizens and businesses. Extraterritorial laws, dependency on hyperscalers, REDATA, the Government Cloud, and the limits of effective control over our own assets.
Brazilian chapter of the Data Management Association International. Presidential mandate focused on national maturity in data governance and responsible AI.
Project management and leadership at the intersection of legal and cybersecurity domains, featuring educational deliverables such as web series and webinars published by the Jornal da Advocacia.
Specialized consultancy in LGPD and GDPR compliance programs, ISO/IEC 27001, risk management (ISO/IEC 27005), and personal data governance.
National Association of Data Privacy Professionals, a member of the Brazilian privacy ecosystem.
Qualified to audit management systems for information security, information privacy, and artificial intelligence. Complementary certifications: Exin DPO, PDPF, PDPP, ISMP, ISO/IEC 27005:2019.
Business Administration and Management. Postgraduate degree in Project Management from FGV. Bachelor’s degree in Systems Analysis from PUC-Campinas.
Technical credentials underpinning the work in governance, privacy, and auditing.
The absence of governance transforms strategic data into operational and financial liabilities. Based on the DMBOK framework, this article analyzes how the formal definition of roles such as Data Owners and Stewards is essential to ensuring the quality of data assets and the success of artificial intelligence projects.
June 26, 2026Authored contributions to works on Digital Law and Governance.
GALANI, Consuelo Milani Rodrigues. Contexto Prático: Como empresas podem se preparar para Governança de Inteligência Artificial. In: LIMA, Ana Paula Canto de; CERQUEIRA, Milla; HACKEROTT, Nadia (coord.). Guia Prático do Direito Digital. São Paulo: Thomson Reuters, 2025. p. 117-130.
The author explores the six pillars of Trustworthy AI, accountability, fairness, privacy, robustness, explainability, and transparency, and proposes a clear methodology that cross-references the tool's degree of autonomy with five levels of corporate and social risk. To operationalize this journey, the text translates major global frameworks, such as the ISO/IEC 42001 standard, the NIST AI RMF 1.0, and the European EU AI Act legislation, into practical implementation steps for companies.
GALANI, Consuelo Milani Rodrigues. Diálogo da LGPD com Governança de Dados, de acordo com o DAMA-DMBOK V2. In: LIMA, Ana Paula Canto de (Org.). Diálogos de Direito e Tecnologia. v. 2. Rio de Janeiro: Editora Império, 2025. p. 235-249.
Legal frameworks, technical standards, and frameworks that guide practices in data governance, data protection, and AI governance. Open-source material for those entering the field and for those seeking to understand the references cited in the texts.
Requests for interviews or expert commentary on data protection, AI, and digital sovereignty.
LGPD, ISO 27001, and ISO 42001 programs, DPO as a Service, data governance, and AI governance. Requests are routed via Privacidade+ or Keyrus, depending on the scope.
Invitations for panels, keynotes, lectures, and board memberships. Privacy, data protection, AI governance, digital sovereignty.