Building a Scalable Vendor Assessment Process (GDPR & NIS2) | Natalija Bitiukova

Podcast: Practical Privacy with Orla Dormer · Orla Dormer

Opublikowano: 2026-05-12

Building a scalable vendor assessment process sounds straightforward—until you’re dealing with 50,000+ vendors across 40+ countries.In this episode, Natalija Bitiukova (Head of Data Protection & Digital Law at Carlsberg) shares how her team tackled this challenge in practice, moving beyond fragmented systems and “paper compliance” to a more operational, scalable approach.We discuss: The pitfalls of running privacy and security assessments separatelyWhy most vendor assessments fail after the questionnaire stageHow to simplify assessments for real users (not lawyers)The importance of data quality and realistic resourcingChange management in large, decentralized organisationsGetting leadership buy-in by framing...