Frank Zweekhorst

Senior consultant specialising in data governance, privacy and security governance across international regulatory and high-security environments.

I support organisations in designing governance frameworks and secure data architectures that translate complex regulatory environments into practical and sustainable operating models. My work focuses on international data governance, cross-border data flows and the integration of privacy, security and compliance requirements into scalable data ecosystems.

A key strength is the ability to bridge legal, technical and strategic perspectives. I regularly work with executive leadership, architects and risk teams to design governance structures that align regulatory compliance, information security and data architecture with organisational decision-making.

My experience spans multiple international regulatory regimes and security environments, including the General Data Protection Regulation, ISO/IEC 27001 environments and other global privacy regimes such as the Personal Information Protection Law (PIPL), the Federal Act on Data Protection (FADP) and the Personal Data Protection Act (PDPA), as well as governance environments aligned with NATO-grade security standards.

Typical areas of work include:

• Data governance frameworks and operating models

• Information security and governance alignment

• International data flows and cross-border data governance

• AI governance and emerging regulatory frameworks

• Privacy and compliance programmes across jurisdictions

• Secure data architecture and compliance-by-design

Clients value the ability to combine governance expertise with architectural thinking and a strong understanding of international regulatory and security environments.

The objective is simple: enabling organisations to build secure, compliant and scalable data ecosystems while maintaining regulatory trust across jurisdictions.