DastraTalks#1: A DPO handles a data breach, Ledger’s Story
Dastra Talks - Léa from Ledger
Ledger, a French scale-up company that develops security solutions built around blockchain-based technologies, operates in a global market, in an international context with clients present in over 150 countries. GDPR compliance management is a project that Léa Richard, a trained lawyer, led within the legal department for more than 3 years.
She also reflects candidly on the data breach Ledger experienced in July 2020, which led to an unprecedented surge in requests from affected individuals. Faced with urgent legal obligations, the company had to quickly reorganize, set up emergency procedures, and introduce automation to remain compliant. Léa shares her experience and the practical advice she wishes she had received at the time, with honesty and humility.
The episode also explores Ledger’s decision to structure its data governance around a triumvirate model, which has proven essential to building a robust privacy and security framework. According to Léa, this structure is a key to success and includes:
The Data Protection Officer (DPO) – acting as a facilitator, advisor, and in her case, a corporate lawyer,
The Chief Data Officer (CDO) – responsible for understanding and optimizing data processes,
The Chief Information Security Officer (CISO/RSSI) – ensuring strong organizational security.
A big thank you, Léa, for sharing your insightful advice with all professionals. Her transparency and perspective are exactly what Dastra Talks aims to promote: honest, no-filter advice from experienced privacy professionals.
🔎 Reminder: Dastra is a simple, flexible, and French-based solution for personal data governance.
📩 Want to stay in the loop about future episodes or share your topic ideas? Sign up to our newsletter!
– The Dastra Team
