Héctor E. Guzmán Rodríguez

Partner

Email hguzman@bgbg.mx

Phone: +52 (55) 5292 5232

VCard

Professional Experience

Education

Publications

Bello, Gallardo, Bonequi & García, S.C., Partner since 2013;
Ecix Group (Spain), Senior Associate from 2012 to 2013;
Écija Abogados, Senior Associate (Spain), 2012;
SIA Group (Spain), Senior ICT Legal Consultant from 2008 to 2012;
Dufry AG (Switzerland), Legal Counsel from 2006 to 2007 and
Bello, Guzmán, Morales & Tsuru, S.C., Partner from 2002 to 2006.

Héctor Guzmán has provided international legal consulting services in the area of personal data protection to the law firm BGBG Abogados since 2012, where he became head ofthat practice areain August 2013.

In addition, he served as “Data Protection Officer” (Chief Privacy Officer) at the Spanish Ministry of Defense for one year (2012–2013), working within the Sub-Directorate General for Information and Communications Technology—Secretariat of State for Defense.

In addition, he has provided consulting services on personal data protection to various multinational companies established in or operating within Spain across a range of sectors, including energy, banking, insurance, retail, and insurance support services, among others. The Valencian Regional Government and the Social Security IT Department. Furthermore, he participated in two studies on the proposed European Union Data Protection Regulation (First EditionandSecond Edition) coordinated byISMS Forum Spainand Data Privacy Institute.

Héctor is currently a member of the Madrid Bar Association (ICAM) and of ISMS Forum Spain, the Spanish Professional Association for Privacy (APEP), and theIbero-American Data Protection Observatory.

Similarly, Héctor Guzmán has carried out compliance and audit projects related to personal data protection for various public administrations in Spain, including theNational Energy Commission, theTax Administration Officeof the Barcelona Provincial Council, and theRegional Ministry of Social Welfare.

PRINCE2 Foundation Certificate, Project Management, APMG-International, 2013.
ITIL V3 Foundation Certificate in IT Service Management,Examination Institute for Information Science (EXIN), ITSM, 2010.
Industrial and Intellectual Property Management in the ICT Sector,EOI – Business School,2009–2010.
Bachelor of Laws (Accredited Degree),University of Zaragoza, 2007.
Master’s Degree in European Union Law, Complutense University of Madrid,2001–2002.
Certificate in Corporate Law, Universidad Iberoamericana,2000–2001.
Bachelor of Laws, Universidad Iberoamericana,1992–1997.

In Mexico: Challenges in Complying with the Federal Law on the Protection of Personal Data in Possession. Ibero-American Data Protection Observatory. April 22, 2014.
We need an IT Security Compliance Department.
Impact Study and Comparison with Spanish Regulations of the Proposed European Union General Data Protection Regulation (Co-author). ISMS Forum SpainandData Privacy Institute. November 22, 2012.
I’m all for cookies! #OpenDebateWith @HectorGuzmanMx. (Co-author) Blog “With your permission, ladies and gentlemen.” August 29, 2013.
Reflections on the Future of Privacy in Europe – Second Edition of the Study on the Proposed EU Data Protection Regulation (Co-author). ISMS Forum Spain and the Data Privacy Institute. January 31, 2014.
Personal Data Breaches and the Liability of Data Processors Under Mexican Law (Part 1). Contribution to the blog“Information Security Breaches & The Law.” January 14, 2014.
Personal Data Breaches and the Liability of Data Processors Under Mexican Law (Part 2). Contribution to the blog “Information Security Breaches & The Law.” January 21, 2014.
Data Protection Day 2014. Activities in 2013 in Mexico.Contributionto the Spanish Professional Association for Privacy (APEP). January 28, 2015.
Transfers of personal data between Mexico and Spain / Spain and Mexico. Regulatory asymmetry. Contribution to LawyerPress. July 14, 2014.
Big Data and Behavioral Advertising: An Approach Based on Mexican Law. Ibero-American Data Protection Observatory. August 18, 2014.
In Mexico: Out-of-Court Debt Collection and the Processing of Personal Data. Experiences and the New IFAI Guidelines. Ibero-American Data Protection Observatory. March 4, 2015.
Data Protection and Habeas Data: A Perspective from Latin America.Runner-up Prize 2014 from the Spanish Data Protection Agency (co-author).
Retention of personal data. Invalidity of Directive 2006/24. CJEU ruling. 2014 Telecommunications Reform. Reflections for Mexico. Virtualis Journal 10 – Tec de Monterrey.
Can the Law Keep Pace with Technology? Video, interview by ComputerWorld University.
Everything You Need to Know About the Upcoming General Data Protection Regulation and Its Impact on Latin American Companies. Interview byNYMITY. August 2015.
We're not Facebook. Reflections on the CJEU’s Safe Harbor Ruling. Spanish Professional Association for Privacy (APEP). October 8, 2015.
The Safe Harbor Agreement and the European Court of Justice ruling that invalidated it. Interview for AbogadoDigital.tv. December 23, 2015.
Data Protection: A Long History, an Incomplete Present, and the Hope for the Future. European Data Protection Day 2016. APEP.
Is the Privacy Shield in Place? Contribution to Law&Trends. February 5, 2016.
Waiting for… Privacy Shield. Contributionto Law&Trends. February 17, 2016.
Personal Data in Latin America: Where Do We Stand? Article in “Segurilatam” by Seguritecnia. February 2016.