Insights and Analysis
AI-washing – when AI hype becomes a litigation risk
Alina Podolyak
Associate Global Regulatory
Languages
English, Ukrainian, Russian
-
Overview
-
Experience
-
Credentials
-
Insights and events
Alina Podolyak helps global companies turn complex privacy, cybersecurity, and AI governance requirements into workable solutions. She advises on UK and EU data protection compliance across the full lifecycle of data use – from product design and marketing to cross-border data transfers, privacy considerations in mergers and acquisitions, and responses to incidents and regulatory scrutiny.
Alina completed a secondment with the UK Information Commissioner’s Office, where she worked on investigations, enforcement, and data policy matters, including AI-related regulatory issues. This experience shapes her approach to risk management, compliance strategy, and engagement with supervisory authorities.
Before joining Hogan Lovells, Alina held senior in-house roles at large-scale, data-driven businesses, including a global dating platform and an international travel and ticketing group operating across dozens of markets worldwide. Having advised from inside fast-moving platforms, she applies a commercially minded, collaborative approach shaped by close work with product, engineering, security, and commercial teams.
Alina is also an Arbitrator and Mediator with the World Intellectual Property Organisation in Geneva, Switzerland.
Representative experience
Advising on regulatory filing and authorisation requirements applicable to biometric data processing across multiple jurisdictions, including high-risk use cases.
Advising on compliance with the ICO’s Age-Appropriate Design Code, including product design, data use, and risk management considerations.
Supporting compliance programmes for the use of AI tools, including policies, guidance, governance measures, and internal documentation.
Advising on data protection and privacy considerations in corporate transactions, including due diligence, risk allocation, and post-transaction integration.
Supporting data breach response matters under UK and EU data protection regimes.
Advising on the design and use of international data transfer instruments under UK and EU data protection regimes.
Supporting responses to data disclosure requests and compliance with disclosure obligations in litigation while managing data protection and confidentiality risks.
Advising organisations across the finance, HR, and healthcare sectors on data protection and regulatory issues arising from the use of AI, biometrics, and other data-driven technologies.
Credentials
Bar admissions and qualifications
- Ukraine
- Certified Information Privacy Professional/Europe (CIPP/E)
Court admissions
- Supreme Court of Ukraine
Memberships
- International Association of Privacy Professionals