For more than three decades, Shampa Chatterjee has built an exceptional career at the intersection of technology, cybersecurity, regulatory compliance, and enterprise risk management. As a globally recognized privacy and information protection executive, she has dedicated her professional life to helping organizations navigate increasingly complex regulatory environments while enabling innovation, digital transformation, and sustainable business growth. Her career reflects a rare combination of technical expertise, strategic leadership, and ethical governance, making her a trusted advisor to executive leadership teams, boards of directors, and regulatory stakeholders alike. Throughout every stage of her journey, Shampa has championed the belief that protecting information is not simply a compliance obligation—it is a competitive advantage that strengthens consumer trust and organizational resilience.
Most recently Shampa held a leadership role as Head of Privacy, Information Security, and Records Management Compliance at First Citizens Bank. In this capacity, she served as Acting Chief Privacy Officer for one of the nation’s largest financial institutions during a period of unprecedented growth and transformation. She played a pivotal role in integrating privacy, cybersecurity, and compliance programs following the acquisition of a California state-chartered innovation bank with approximately $110 billion in assets. Her leadership ensured seamless post-merger data integration while maintaining rigorous regulatory compliance and achieving zero material enforcement actions. She also advised executive leadership and Board-level Risk Committees on enterprise privacy strategy, AI governance, operational resilience, and evolving regulatory obligations, demonstrating her ability to guide organizations through high-stakes transformation with confidence and precision.
Before joining First Citizens Bank, Shampa served as Director of Privacy and Information Security Compliance at Silicon Valley Bank, where she built the institution’s first global privacy governance framework. She authored and rolled out the Bank’s first Global Privacy Policy and associated Standards and laid out the governance structure and framework that allowed for rapid business expansion across multiple international markets. Recognizing the growing importance of automation and data intelligence, she led the implementation of privacy technologies including OneTrust and BigID to automate Privacy Impact Assessments, Data Subject Requests, data mapping, and classification processes. These initiatives dramatically improved operational efficiency, audit readiness, and regulatory defensibility while establishing scalable governance practices across North America, Europe, Asia, and Latin America.
Shampa’s extensive career includes nearly eighteen years with American Express, where she held progressively senior leadership positions within the Global Privacy Office. During this time, she became instrumental in shaping enterprise-wide privacy capabilities supporting both domestic and international operations. She led the global implementation of consent management platforms spanning more than ten countries, directed privacy compliance initiatives across Europe, Asia-Pacific, and Latin America, and successfully balanced evolving regulatory expectations with business growth objectives. She also developed enterprise standards governing customer privacy preferences, marketing compliance, third-party risk oversight, and global breach notification capabilities. Her work positioned American Express to respond proactively to rapidly changing privacy regulations while enhancing customer confidence in one of the world’s most respected financial brands.
Throughout her career, Shampa has become internationally recognized for her expertise in privacy governance, cybersecurity, operational risk management, regulatory compliance, and data protection strategy. Her command of complex regulatory frameworks—including General Data Protection Regulation (EU,UK)), EU AI Act, Digital Services Act (DSA-EU), Personal Information Protection Law (China), Digital Personal Data Protection Act (India), General Data Protection Law (Brazil), Personal Information Protection and Electronic Documents Act (Canada), Gramm Leach-Bliley Act (GLBA), Health Insurance Portability and Accountability Act (HIPAA), California Privacy Rights Act ( CPRA), Colorado AI Act, PCI-DSS standards, NIST frameworks, ISO 27701, and Federal Financial Institutions Examination Council (FFIEC) guidance—allows her to design governance programs that transcend individual jurisdictions and support multinational operations. Rather than viewing compliance as a series of isolated legal requirements, she approaches governance through a principles-based methodology that integrates privacy, cybersecurity, ethics, operational resilience, and business strategy into a cohesive enterprise framework. This philosophy has consistently enabled organizations to strengthen risk management while accelerating innovation and market expansion.
An accomplished executive leader, Shampa has successfully built and mentored multidisciplinary global teams consisting of senior privacy engineers, security analysts, compliance managers, and technology specialists. She has led enterprise AI governance initiatives, participated in new products and services assessments, tech architecture review boards, third-party risk councils, and change advisory committees, and provided strategic oversight for emerging technologies that leverage artificial intelligence and advanced analytics. Her ability to translate highly technical and regulatory issues into practical business strategies has made her an invaluable partner to executives, boards, legal teams, technology organizations, and operational leaders. Whether guiding enterprise acquisitions, implementing privacy-by-design methodologies, or establishing international governance programs, she consistently delivers solutions that align risk management with organizational objectives.
Beyond her executive responsibilities, Shampa has remained deeply committed to advancing the privacy profession and serving her community. She has been an active leader within the International Association of Privacy Professionals (IAPP), serving as an Advisory Board Member for Women Leading Privacy and previously as Phoenix KnowledgeNet Co-Chair. She regularly moderates and speaks at IAPP conferences, contributing thought leadership on privacy, information protection, and emerging regulatory issues. Her dedication to education extends beyond the professional community through years of volunteer service teaching financial literacy for Junior Achievement, supporting Habitat for Humanity, and teaching yoga through Project Roots Arizona, where she promotes wellness, balance, and community engagement. These efforts reflect her belief that leadership is measured not only by organizational success but also by meaningful contributions to society.
International experience has been a defining characteristic of Shampa’s career. She has supported privacy program implementations, governance initiatives, and executive collaboration throughout Europe, Canada, Mexico, India, China, Brazil, and numerous Asia-Pacific countries. Fluent in English and conversant in multiple Indian languages including Hindi, Telugu, Bengali, and Sanskrit, she brings valuable cultural awareness to multinational business environments. Her global perspective enables her to navigate complex cross-border regulatory environments while fostering collaboration among diverse teams and stakeholders. This international outlook, combined with deep technical expertise and executive leadership experience, positions her as an exceptional advisor for organizations seeking responsible growth in an increasingly data-driven world.
Today, Shampa is actively pursuing corporate board opportunities where she can leverage her decades of experience in privacy governance, cybersecurity, AI oversight, enterprise risk management, and regulatory strategy. Having spent more than thirty years building privacy and information protection programs for some of the world’s most respected financial institutions, she believes she is uniquely positioned to help boards navigate the evolving challenges of digital transformation, artificial intelligence, cyber resilience, and global regulatory compliance. She is equally motivated by the opportunity to continue learning through board service while contributing thoughtful governance, independent oversight, and strategic insight. Her career demonstrates that lasting success is built on trust, integrity, responsible innovation, and a steadfast commitment to protecting both organizations and the people they serve.
Character:
Shampa leads with integrity, humility, and an unwavering commitment to ethical decision-making, earning the confidence of executives, regulators, and colleagues throughout her career. Her dedication to community service, mentorship, and professional advancement reflects a leader who believes that success is measured by both business outcomes and positive societal impact.
Knowledge:
With more than thirty years of experience spanning cybersecurity, enterprise risk, and global regulatory compliance, Shampa possesses exceptional technical and strategic expertise. Her mastery of international privacy data protection laws, AI governance frameworks and information protection risk management enables organizations to navigate complex challenges with confidence.
Strategic:
Shampa consistently aligns privacy and cyber governance with broader business objectives, transforming compliance into a strategic enabler of innovation and growth. Her leadership during major acquisitions, global program implementations, and enterprise transformations demonstrates her ability to anticipate emerging risks while creating long-term organizational value.
Communication:
Exceling at translating highly technical regulatory and cybersecurity concepts into clear, actionable guidance for boards, executives, and cross-functional stakeholders. As an accomplished speaker, moderator, and educator, she builds consensus, fosters collaboration, and inspires trust across diverse audiences.
