Track record
Outcomes
Programs are easy to describe and hard to run. Here is what the work actually produced: the numbers first, then the projects behind them.
PIAs
Privacy impact assessments, end to end
Lead end-to-end Privacy Impact Assessments (PIAs), Secure-by-Design reviews, and vendor security assessments across enterprise SaaS and AI initiatives.
Inventory
Personal information and vendor inventory
Rebuilt and maintain the enterprise personal information and vendor inventory with standardized ownership and lifecycle tracking.
AI intake
Enterprise AI governance reviews
Designed and run a tiered enterprise AI intake and governance review process across privacy, security, transparency, and human-oversight criteria.
Law 25
Deletion and access request workflows
Operationalized cross-functional workflows and SLA reporting to fulfill consumer data deletion and access requests under Quebec Law 25 and PIPEDA.
2023–2024
Enterprise OneTrust administration
Served as enterprise OneTrust administrator during tenure, automating PIA and Secure-by-Design workflows and training 450+ stakeholders.
450+
Stakeholders trained
Across privacy, data governance, and AI tools, from analysts to executives.
In practice
Three projects, up close
Complex multi-department privacy reviews
Led complex multi-department HR, financial, and customer-support system privacy and security documentation reviews, coordinating data flows, risk findings, and mitigations across the teams involved.
Data inventory rebuild
Rebuilt and maintain the enterprise personal information and vendor inventory with standardized ownership and lifecycle tracking, turning it into the single source the privacy program actually runs on.
AI intake and governance
Designed and run a tiered enterprise AI intake and governance review process across privacy, security, transparency, and human-oversight criteria, with legal, privacy, and IT reviewing new AI tools before rollout.
Writing
Publications
92+ articles on Canadian privacy law, AI governance, and data protection, published on Insights and in both English and French. The privacy glossary covers 333 defined terms, and the Privacy Pulse tracks enforcement and regulatory news weekly.
A note on background
Career background vs. consultancy engagements
The operational experience described on this page reflects Mohammad Movahedi's work in corporate employment roles (including at The Globe and Mail and TELUS). Those items are individual career background, not client engagements of Movahedi Solutions (1000823315 ONTARIO INC.), and do not represent an endorsement by any employer.
Speaking
Workshops, not slideware
I run practitioner-led sessions on privacy programs, Law 25 readiness, and AI governance for teams that want working knowledge, not slideware. If your team or event needs one, start with the contact form and tell me what you are trying to fix.
Want these outcomes in your organization?
Project, fractional, or roadmap engagements, scoped around the results above.