AI Governance . Data Protection . UK
Governance for decisions that have to be defended
AI governance and data protection for organisations that need it to work: proportionate, evidenced, never generic.
The purpose of governance is not to make action difficult. It is to make responsible action possible.
Mediajem works with boards, risk and compliance functions and the people who actually deploy AI and handle personal data, on the questions that matter when a decision is challenged: why an AI-enabled decision was permitted, what safeguards surrounded it, who remained accountable, and what happened when the system behaved differently from what was intended.
We do this as a fractional DPO and governance partner, through AI governance workshops, and through the practical toolkits that regulated organisations need in order to get on with their work.
A consequential decision made with AI is almost always also a decision about personal data, about who had the authority to make it, and about what the Board will later have to defend. We treat it as one question with several parts. Start wherever the pressure is.
AI governance
Workshops for boards, risk and compliance functions and technology governance leads that turn frameworks into assigned accountability, a mapped oversight structure for your own AI use cases, and a roadmap you can evidence.
Data protection
Fractional DPO services and governance consulting: ICO liaison, DPIAs, breach process and board reporting.
A UK GDPR Representative service (Article 27) for EU businesses operating here.
Ready-to-use compliance toolkits. For crypto and fintech organisations, SMEs, healthcare providers, charities and schools, each with genuinely different risk profiles.
The FCA's cryptoasset authorisation window opens 30 September 2026
The FCA’s cryptoasset authorisation window opens on 30 September 2026 and closes on 28 February 2027, ahead of the regime commencing on 25 October 2027.
If your firm will need to apply, get in touch to talk through where you stand.
Proof
“Vera's knowledge and monitoring regulatory compliance is impressive: she is always on top of the latest regulatory changes, and she was the one making us aware of the Travel Rule and engaging with providers to ensure we followed the rules.”
— Theo Richard, Solidity Engineer, Omnia DeFi / Validitum
“Vera brought both professionalism and deep subject-matter expertise to the role, supporting over 40 departments in strengthening their GDPR compliance. […] Vera's insight, clarity, and strong ethical compass made her an invaluable asset to the organisation.”
— Frank O'Fidel, National Church Institutions
More recommendations can be viewed on my LinkedIn profile: Here
About
I founded Mediajem in 2021 after working as COO and registered Data Protection Officer in FinTech, where I dealt directly with the FCA and the ICO, and after thirty years in IT and risk management before that.
I hold two MScs, in Management of Business IT (Distinction) and in Law, Regulation & International Financial Systems (Merit), a BA in Economics, and Data Protection Practitioner certification.
I work with trusted associates and sector specialists, in safeguarding, AML and KYC, and governance, so that the support scales with your organisation and stays specific to your sector rather than generic. Every engagement is personal; none is off the shelf.
Philosophy
Governance should strengthen an organisation’s judgement and resilience, not simply produce more paperwork.
Compliance made simple, growth made possible.
Contact Us
Whatever stage you are at, preparing an FCA application, building out a DPO function, planning an AI governance workshop, or not yet sure what “ready” looks like, I am happy to talk it through.
Privacy Notice: We take your privacy seriously. The information you provide here will be used only to respond to your enquiry and, where relevant, provide the services you request. For full details, please see our Privacy Policy