About
I make privacy and AI governance usable.
I am Mohammad Movahedi, a Mississauga privacy and AI governance consultant with CIPP/C certification. I help teams trace how personal information moves through their systems, then fix the handoffs, controls, and decisions that create risk. My work starts with the data flow, not another policy document.
The work moved before the title did.
From March 2024 to the present, I have worked at The Globe and Mail. The newsroom is where privacy leaves the policy document and meets deadlines, products, people, and decisions that cannot wait for a perfect diagram.
Before that, TELUS handed me a fast education in ownership. I joined as a contract Data Governance Analyst in July 2023. Within my first month, after the previous administrator left, I became the sole enterprise OneTrust administrator.
Credentials and service
- Credential CIPP/C Held
- Credential OneTrust Fellow
- Credential ISC2 Certified in Cybersecurity
- Credential Lean Six Sigma (LinkedIn Learning)
- Graduate Master of Professional Studies in Analytics (MPS in Analytics) Machine Learning minor, Northeastern University, 2022–2024
- Undergraduate B.Sc. Industrial Engineering K.N. Toosi University of Technology, Iran, 2015–2019
- Volunteer ISC2 Toronto Chapter November 2025 to present
- Past service DAMA Toronto / IRMAC IT Manager, September 2023 to July 2025
I am suspicious of privacy programs that begin with another policy.
Start with the data flow, the handoff, and the person who has to make the call.
Policies matter, but they are a poor first diagnostic.If you cannot trace what happens in the system, the prose will not rescue you.I would rather find the awkward manual step early, while there is still room to change it.
How much governance can we add before it becomes ceremony?
I do not have a universal answer. The line shifts with the team, the system, and the consequences of getting it wrong. That question stays open in every engagement.
One line does not shift: I do not provide legal consultation or legal advice.
Focus
Where the attention goes.
The work behind this site, in eight phrases. Each one maps to live program work, a tool, or an engagement.
- Privacy program design
- AI governance & risk
- Canadian privacy law (CIPP/C)
- Security operations (MDR/EDR)
- Process excellence (Six Sigma)
- Data analytics & ML literacy
- Vendor risk & SOC 2 reviews
- Stakeholder enablement
Location
Where I work from.
Based in Mississauga, Canada, with earlier career years in Tehran, Iran (operations & IT).
- Based in
- Mississauga, Canada
- Work contexts
- Canada · hybrid & remote roles
- Earlier career
- Tehran, Iran (operations & IT)
Résumé
The paper version.
The current CV as a PDF: privacy and AI-governance experience, certifications, and education. Updated September 2026.
06 / Ask
Bring me the messy version.
Start with what is actually happening. Share the difficult part and I will respond with a clear next step.