Amy Worley

Managing Director & Data Protection Officer

Amy Worley is a globally recognized expert in digital trust, advising organizations worldwide on AI governance, data privacy and protection, cybersecurity, and the strategic use of data as a business asset. She is the bestselling author of The Confidence Advantage: Optimizing Privacy, Cybersecurity, and AI for Growth, a guide to helping organizations build trust, manage risk, and create competitive advantage through effective governance. In 2026, she received the Fortress Award for Data Protection in recognition of her leadership and contributions to the field.

As organizations increasingly seek to harness the transformative potential of artificial intelligence, Ms. Worley helps boards, executives, and operational leaders design practical AI governance programs that enable innovation while maintaining accountability, transparency, and trust. She is a Certified Artificial Intelligence Governance Professional (AIGP) and holds a professional certification in AI Ethics from the London School of Economics and Political Science (LSE).

Ms. Worley has spent her career helping organizations develop comprehensive privacy, AI governance, cybersecurity, and information management programs. She previously served as Global Chief Privacy Officer for a leading global pharmaceutical and medical device company and has extensive experience designing and implementing compliance and governance frameworks for highly regulated organizations operating across multiple jurisdictions.

Ms. Worley currently serves as a fractional Data Protection Officer (DPO) for organizations worldwide, providing gap and risk assessments, developing remediation plans, liaising with regulatory authorities, assisting clients in responding to security incidents, and advising executive leadership teams and boards of directors on technology-related risk. She frequently advises clients on integrating privacy, cybersecurity, and responsible AI governance into enterprise risk management and digital transformation initiatives.

Her certifications include the International Association of Privacy Professionals Certified Information Privacy Professional for the United States (CIPP/US) and Europe (CIPP/E), Certified Information Privacy Manager (CIPM), Fellow of Information Privacy (FIP), and Certified HIPAA Privacy and Security Expert (CHPSE). She is also a Certified Information Systems Security Professional (CISSP) and Certified Artificial Intelligence Governance Professional (AIGP).

Ms. Worley leads BRG’s Privacy and Information Compliance practice. She has deep experience building effective and sustainable multinational governance programs across industries, with particular expertise in healthcare, life sciences, financial services, technology, data analytics, e-commerce, and real estate. Her clients benefit from her extensive experience working with regulators across every global region, helping organizations navigate evolving legal requirements while enabling innovation and growth.

Known for her practical and risk-based approach, Ms. Worley helps organizations maximize the value of their data and technology investments while minimizing regulatory, operational, and reputational risk. She believes that effective privacy, cybersecurity, and AI governance programs are not merely compliance functions—they are foundational drivers of trust, resilience, and sustainable business growth.

Before entering industry and consulting, Ms. Worley practiced law for sixteen years, advising clients on compliance with a broad range of domestic and international privacy, cybersecurity, financial services, and healthcare regulations, including HIPAA, HITECH, FCRA, FACTA, GLBA, COPPA, FERPA, GDPR, LGPD, PIPEDA, and numerous other U.S., Latin American, European, and Asian privacy laws.

Ms. Worley has provided expert testimony in U.S. federal courts regarding data breach notification obligations and has offered expert deposition testimony concerning the misuse of personal information by cybercriminals following security incidents. She has also served on several nonprofit boards and was honored with the North Carolina Governor’s Award for Volunteer Service for her community leadership and volunteer contributions.

Employment History

Merz Pharma Group
Global Chief Privacy Officer, 2017–2019

Merz North America, Inc.
Senior Counsel and Privacy Officer, 2016–2017

Jackson Lewis, P.C.
Co-Practice Group Leader, Privacy, Data Security and eDiscovery Practice Group, 2014–2016

McGuireWoods, LLP
Partner, 2004–2014

Ferguson, Stein, Adkins, Gresham and Sumter
Associate, 2001–2004

US District Court for the Southern District of Georgia, Hon. Anthony A. Alaimo
Law Clerk, 2000–2001

Advanced AI & Decision Intelligence

The real challenge of artificial intelligence is not building models but deploying intelligence that holds up under scrutiny.