Sofia Bruno

Summary

Sofia specializes in commercial agreements, data protection and digital compliance, including the GDPR, the EU AI Act, and emerging tech regulations. She bridges law and technology by guiding clients through complex legal landscapes – ensuring robust data governance, ISO/IEC 27001 compliance, and operational resilience under frameworks like NIS 2 and DORA. Her focus is to turn strict regulatory requirements into clear commercial advantages. With over 14 years’ experience, Sofia is particularly appreciated for her pragmatic, solutions-oriented and positive approach, helping clients address complex regulatory challenges effectively while minimizing legal risks.

Sofia brings a remarkably broad perspective to data protection and privacy, built over 14 years of focused practice. Her extensive track record includes serving as in-house counsel for tech companies in London and Sweden, working at a top-tier Swedish law firm, and acting as a Data Protection Officer (DPO). Her versatility is further highlighted by a specialized secondment at the Swedish eHealth Agency (E-hälsomyndigheten) and nine years of co-developing a law firm, where she co-led the digital compliance and GDPR practice.

Sofia supports clients in all sorts of data protection, digital compliance and commercial law related matters such as managing and implementing compliance programs, carrying out and documenting risk assessment, drafting and negotiating agreements, drafting and implementing policies and privacy information notices.

In addition to Sofia’s specialization in laws related to the tech industry, Sofia has gained extensive experience in the regulatory aspects of food administration and the wholesale industry within the Swedish and European markets. She has built a strong reputation for navigating distributors, food producers, and wholesalers through the complex regulatory environment governing food safety, labelling, packaging compliance (including EPR and the EU PPWR), and warehousing logistics. This involves helping clients establish, implement, and maintain robust self-monitoring programs (Sw: egenkontrollprogram) tailored to their specific operations, ensuring full compliance with both food and supply chain regulations.

Professional experience

Education

Bar admissions

Admitted in Sweden (Advokat)

Languages

Swedish – native
English – near-native / full professional proficiency
Spanish – conversational

Positions of trust

Chairperson of the Board, Private Parental Co-operative Preschool (Ekonomisk förening) | 2024 – Present
Head of the board for a parental co-operative preschool. Responsible for overall corporate governance, financial management of the annual budget, and legal compliance, as well as serving as the ultimate employer for the educational staff.

Publications

 Legal advisor & Guest lecturer | Swedish Performing Arts Association (Svensk Scenkonst) | 2021 – Present

• Retained on an ongoing basis to provide specialized legal guidance and deliver professional training seminars for member organizations.
• Lecturing on key industry topics, including commercial agreements, intellectual property/copyright law, GDPR, and AI compliance within the performing arts sector.