Of Counsel at DRAKOPOULOS

Ioannis Giannakakis brings over three decades of experience in legal and compliance roles, having worked with global organizations like Nationale Nederlanden, Unilever, Novartis and G4S. For the past 13 years, Ioannis has been recognized as a Digital Law Leader in South Eastern Europe, specializing in the intersection of law and technology. At Drakopoulos Law Firm, a leading legal practice in South Eastern Europe, Ioannis leads the Data and Digital Practice Group, helping clients transform emerging digital challenges into opportunities for growth. He also serves as the Data Protection Officer (DPO) for the Hellenic Ministry of Migration and Asylum, where he designs and implements advanced data protection strategies.

From Legal Compliance to Digital Law Leadership

My professional journey has spanned diverse industries and geographies, equipping me with a wealth of insights into legal compliance and data protection. Early in my career, I transitioned into the digital law landscape, recognizing the transformative potential of data as a business enabler. Today, I lead the Data and Digital Practice Group at Drakopoulos Law Firm, assisting clients in South Eastern Europe to navigate the rapidly evolving digital landscape.

Serving as DPO for the Hellenic Ministry of Migration and Asylum, I focus on implementing data protection strategies that integrate cutting-edge technologies like drone surveillance, RFID cards and AI-based systems. Our goal is to safeguard the rights of vulnerable populations while ensuring compliance with evolving European regulations.

Integrating Privacy by Design Principles

Privacy by Design (PbD) lies at the heart of effective data protection strategies. At the Hellenic Ministry, we embed PbD principles such as data minimization, transparency and privacy-enhancing technologies (PETs) throughout the data lifecycle. These strategies are particularly vital when designing systems that handle sensitive data for refugees and asylum seekers.

The challenge often lies in fostering collaboration between privacy professionals and development teams. Developers sometimes view PbD as an obstacle to functionality, but through proactive engagement and education, we demonstrate how privacy considerations enhance user trust and product value.

Engaging Stakeholders to Align on Data Protection Goals

Throughout my career, I have learned the importance of transparency, empathy and shared accountability. These principles help bridge the gap between legal, technical and business stakeholders. By fostering a culture of collaboration and aligning data protection initiatives with broader business objectives, we ensure that privacy becomes an integral part of operational success.

Addressing the Challenges of Compliance in a Dynamic Landscape

Compliance with data protection regulations is often hindered by a lack of understanding at the executive level. Data protection is sometimes viewed as a "tick-box" exercise rather than a strategic asset. Overcoming this mindset requires ongoing education and demonstrating how robust data protection can serve as a competitive advantage.

  ​Data is the new currency and privacy by design is the compass guiding us through the digital era to turn challenges into competitive advantages 

Enhancing Resilience Against Cybersecurity Threats

The European regulatory environment, shaped by NIS II, DORA and DSA, underscores the urgency of cybersecurity. Key strategies include:

● Implementing strong incident response plans.

● Conducting regular vulnerability assessments and penetration testing.

● Cultivating a cybersecurity-aware culture through training and unannounced phishing tests.

● Deploying advanced solutions such as Security Operations Centers (SOC) and Data Loss Prevention (DLP) systems.

● Adhering to international frameworks like ISO 27001 or NIST to maintain robust cyber resilience.

Emerging Trends Shaping Data Protection

The next 5-10 years will bring significant shifts in data protection, including:

1. Global Privacy Regime Harmonization: Unified standards across jurisdictions.

2. Increased Adoption of Privacy by Design: As digital services expand, integrating privacy into design processes will be paramount.

3. AI and Machine Learning in Data Protection: These technologies will drive automation and enhance regulatory compliance.

4. Secure Data Transfer Mechanisms: Addressing cross-border data flows will remain a priority.

Organizations should proactively invest in privacy-focused teams, training and cybersecurity measures to adapt to these changes.

Advice for Aspiring Professionals

For those entering the enterprise technology or data protection sectors, my advice is clear: embrace the opportunities of the digital era. Careers in AI, cybersecurity and digital compliance offer immense potential for professional growth. Equip yourself with technical knowledge, foster digital literacy and approach challenges as opportunities to innovate and excel.

The Future of Digital Law and Data Protection

As businesses continue to evolve, data protection will become increasingly central to competitive strategy. By prioritizing compliance, fostering innovation and building resilient systems, organizations can turn data privacy into a cornerstone of their success. At Drakopoulos, we are committed to leading this transformation, turning regulatory challenges into opportunities for growth and value creation.