Steffi Sesuraj Access

She handed out cards with different user identities: “Anoushka, 16, shares art online.” “Mr. Davies, 72, uses your app to video-call his doctor.” “Lea, a journalist in a country with strict speech laws.”

Today, she runs her own non-profit that teaches children how to protect their digital shadows. And on her website, beneath her list of awards and patents, is the same quote from her mother that she’s kept since law school: “You don’t own the information. You merely borrow it for a while. Be a good borrower.”

Steffi knew she had to change their minds. She didn’t march into the boardroom with legal threats. Instead, she brought a stack of index cards. Steffi Sesuraj

Steffi wasn’t a coder. She couldn’t architect a cloud database or debug a Python script. But she was fluent in the language that made those things matter: trust.

The backlash, when it came, was brief. The public, exhausted by corporate cover-ups, was stunned by the honesty. News headlines read: “Company Messes Up, Then Does the Unthinkable: Tells the Truth.” The stock dipped for a day, then soared as the company was hailed as a new gold standard for digital ethics. She handed out cards with different user identities:

In the sprawling, humming campus of a leading tech giant in Silicon Valley, where jargon like “synergy” and “disruption” hung in the air as thick as the scent of cold brew coffee, Steffi Sesuraj was known for two things: her encyclopedic knowledge of data privacy law and her uncanny ability to explain it without putting anyone to sleep.

“Let’s play a game,” she announced to the skeptical engineers. You merely borrow it for a while

Her most famous case, however, came when a major smart-home device company discovered a vulnerability that had been silently recording snippets of private conversations. The company’s legal team wanted to bury the report, issue a quiet patch, and hope no one noticed.

Her big break came when a social media startup, reeling from a public breach of user location data, hired her as their first Data Protection Officer. The engineering team saw her as a “no” person—a roadblock. The CEO saw her as a necessary evil.

Word spread. Steffi Sesuraj didn’t just write policies; she built empathy. She was invited to speak at major tech conferences, where she famously tore up a standard 15-page terms-of-service agreement on stage and held up a single, postcard-sized document instead. “This,” she said to a silent auditorium of thousands, “is all a user actually reads. Make the rest matter.”