Alexandra Sumner

Alexandra is an experienced US privacy attorney and legal advisor supporting scaling companies to develop robust compliance programs that evolve with business growth. With experience across digital health, FDA-regulated medical devices, and high-growth SaaS environments, she partners with executive and product teams to align legal strategy with business objectives. Her expertise spans data protection, AI governance, and healthcare regulatory compliance, with a focus on translating risk into practical, business-ready solutions.

Known for her pragmatic, commercially minded approach, Alexandra helps organisations navigate complex regulatory landscapes while maintaining speed and momentum. Drawing on in-house experience as a Chief Privacy Officer, Information Security Officer, Privacy Consultant, and Data Protection Officer, she provides embedded legal and privacy counsel to companies operating under increasing regulatory and operational scrutiny. She is particularly focused on the intersection of law, technology, and innovation – advising on AI-enabled products, data governance, privacy-by-design initiatives, and compliance frameworks that support sustainable growth. Her experience spans both the legal/commercial and operational compliance sides of privacy, allowing her to advise organisations on everything from BAAs, DPAs, and commercial agreements to DPIAs/PIAs, audit readiness, and enterprise privacy governance programs.