Professional Profile
Milena Mora Arellano is an attorney specializing in personal data protection, passionate about new technologies and their intersection with the law. Since July 2023 she has been part of LegalPartners Ecuador S.A.S. as Senior Privacy Consultant, where she advises a broad portfolio of clients on the design and implementation of privacy and data protection compliance frameworks.
Her approach to privacy stems from the balance between the rights of data subjects and the protection of information as a strategic asset for organizations, within a corporate culture oriented toward compliance. She has developed legal tools and governance models for clients in sectors as diverse as retail, e-commerce, healthcare, and supply chain.
In parallel, she serves as Data Protection Officer (DPO) at NOVAECUADOR S.A. since February 2024, consolidating her track record in directly supporting companies in fulfilling their obligations under Ecuador's personal data protection regulations. Her profile combines strong international academic credentials, consulting experience, and a deep commitment to AI ethics, legaltech, and the Women in Data Privacy movement.
Education
- Master's in Personal Data Protection — Universidad Internacional de La Rioja (UNIR), Spain (Oct. 2021 – Nov. 2022)
- Attorney at Law — Universidad Central del Ecuador, Quito (Feb. 2015 – Mar. 2020)
Professional Experience
- Senior Privacy Consultant · LegalPartners Ecuador S.A.S. · Jul. 2023 – Present
Data protection consulting, compliance framework design, and development of legal tools for clients across various economic sectors.
- Data Protection Officer (DPO) · NOVAECUADOR S.A. · Feb. 2024 – Present
Oversight of regulatory compliance in personal data protection, management of data subject requests, and support in internal audits.
- Associate Attorney in Data Protection · Robalino Attorneys · Dec. 2021 – Mar. 2023
Specialized privacy and compliance advisory for local and international companies.
- Trainee Data Protection Officer · Consejería de Educación y Juventud, Spain · Mar. 2022 – Nov. 2022
Internship at a Spanish public entity, focused on GDPR application and data subject request procedures.
- Legal Assistant · Juan Francisco Palacios (Administrative, Civil and Telecommunications Law) · Aug. 2021 – Dec. 2021
- Legal Assistant · DIGI-MED Ecuador · Jul. 2020 – Sep. 2021
- Legal Intern · SERTECPET S.A. · Mar. 2018 – Sep. 2018
Certifications & Courses
- Certified Information Privacy Manager (CIPM) — IAPP (May 2025)
- International Course in Personal Data Protection — Universidad San Andrés, Argentina (Apr. 2024)
- Compliance Challenges in Artificial Intelligence and Data Protection — World Compliance Association (Oct. 2022)
- Leadership Diploma — Universidad Marconi + UNIR (Oct. 2022)
- Cybersecurity Course — Global Lynx (Jul. 2022)
- World Technology Law Conference — ITechLaw (Jul. 2021)