Bringing Cybersecurity, Data Privacy & Legal Together.
One joined-up approach to AI Governance.

If your board, clients, investors or a regulator asked tomorrow, could you confidently demonstrate not just your AI governance approach, but how cybersecurity, data privacy and legal are brought together under a single governance framework?

Designed specifically for pharmaceutical, biotech and life sciences organisations navigating AI governance, data privacy and increasing regulatory expectations. 

WHY NOW

Are you prepared?

AI didn't wait for a policy. It's already running on devices you don't control, touching data you're accountable for and the regulatory floor is rising fast.

78%
Adoption has outrun control
78% of organisations now use AI, up from 55% in 2023 and AI-related incidents rose 56% to a record 233 in 2024.*
3 in 4
You can't see most of it
Three in four employees use AI at work; 78% bring their own unapproved tools; over half won't admit to using it for their most important work.*
In force
The law has caught up
EU AI Act transparency obligations have applied since 2 August 2026. UK GDPR accountability and GxP/ALCOA+ data integrity duties already apply today.*
Diligence
Already a deal-breaker
For scaling and PE-backed businesses, unmanaged AI is now a standard due diligence question. Left unanswered, it depresses value.

Some AI Act deadlines for high-risk systems have been pushed back. That's not a reason to wait; it's a head start for whoever moves first. Organisations that address AI governance early gain confidence to adopt AI faster, answer customer and investor questions more effectively, and reduce friction with regulators. *The above statistics have been taken from Stanford HAI's AI Index Report 2025, Microsoft & LinkedIn's 2024 Work Trend Index Annual Report, and the European Commission's AI Act.

WHERE THE GAP EMERGES

The gap isn't a lack of expertise.
It's fragmented ownership.

AI Governance, Data Privacy and Legal are often managed separately, leaving decisions to be aligned after the fact. We help organisations bring those disciplines together: one integrated view, one leadership conversation and one prioritised roadmap.

TODAY
Technology
Data Privacy
Legal
Managed in isolation — decisions joined up after the fact, but lack of clarity around ownership creates the gap.
.
LS LAW
BRIDGES THE GAP
→
WITH LS LAW
One integrated view
One leadership conversation
One prioritised roadmap
One team, from day one.
WHAT YOU'D WALK AWAY WITH

One integrated view. One leadership conversation. One prioritised roadmap.

We build a clear picture of what your organisation has, what it doesn't, and what matters most, then deliver the roadmap, governance framework, executive oversight and cultural change needed to make it stick. From day one.

01
One integrated view
A clear picture of what your organisation has, what it doesn't, and what matters most.
02
One leadership conversation
Cybersecurity, data privacy and legal joined up, not decided after the fact.
03
One prioritised roadmap
Plus the governance to keep it under control and the training to make it stick.
No clear policies yet?
Maybe you don't have robust enough AI policies and aren't sure what tools your teams use, and don't know where to begin.
Plenty of policies?
You have plenty, but they're untested against how the business actually runs and spread across legal, IT and acquired systems that don't quite talk to each other.

Either way, the scope is shaped around you — never sold off the shelf.

YOUR FIRST CALL IS WITH THE EXPERTS

Led personally by Stanley Konopka, Alejandro Gené Tolnay and Wendy Lloyd-Goodwin. They tailor the scope to your priorities, organisation's size, AI maturity and the controls you already have, so you only pay for what you need.

Book a call →
START WITH THE DIAGNOSTIC

Find out where your organisation stands. Complete a complimentary AI Governance Diagnostic for an initial indication of your current maturity and the areas that may warrant attention before your consultation.

Take the Diagnostic →

Most organisations don't have an AI problem.
They have a visibility problem.

AI adoption is already happening across most organisations, often without complete visibility. Employees are using AI tools with the best intentions, but if leadership lacks a clear picture of which tools are being used, what information is being shared and where responsibility sits, governance becomes fragmented.

That's where the gaps appear.

HOW IT WORKS

Three steps

No scanning tools or penetration testing. We build a clear picture of what the organisation has, what it doesn't, and what matters most, then deliver a prioritised roadmap, the governance to keep it under control, and the training and culture to make it stick.

01
Understand where you are.
02
Identify the gaps.
03
Build a practical roadmap.
MEET THE EXPERTS

Why LS Law

AI governance requires expertise across cybersecurity, data privacy and legal. Rather than handing work between departments, your engagement is led by three senior specialists working together from the outset.

Stanley Konopka
Stanley Konopka
AI TECHNOLOGY & GOVERNANCE
Stanley provides AI consulting and fractional CIO support specialising in AI governance, technology strategy, and enterprise AI adoption within regulated industries. 25+ years of global technology leadership across life sciences and consumer tech: Celgene, Bristol Myers Squibb, Molecular Partners, SharkNinja.
Alejandro Gené Tolnay
Alejandro Gené Tolnay
DATA PRIVACY & AI GOVERNANCE
Spanish-qualified lawyer, 15+ years advising multinational life sciences on data privacy, Responsible AI, healthcare compliance and complex regulatory matters. Formerly VP & Chief Privacy Officer at Bristol Myers Squibb, leading global privacy, data governance and AI enablement.
Wendy Lloyd-Goodwin
Wendy Lloyd-Goodwin
LEGAL
General Counsel and CEO of Life Science Law, bringing over 20 years of senior legal and compliance leadership experience within multinational pharmaceutical organisations, including MSD, Novartis, Bristol Myers Squibb, Novo Nordisk and Illumina.
You're never handed off
Your engagement is led throughout by the same three senior experts you meet from the outset. When specialist expertise is needed, they bring in the right people from the wider LS Law network while remaining your primary points of contact.
Governance isn't a policy on a shelf
It's clear ownership, defined accountability and executive oversight, with leadership, culture and training reinforcing how those decisions are put into practice. That's why these elements are embedded throughout the programme.
TRUSTED BY THE TEAMS BRINGING FRONTIER INNOVATIONS TO MARKET
2a63068e-5502-473b-80ce-8731b7884a9c 910be970-6e14-4fcb-b4c5-0d397afb4ec4 4e267b6d-7b71-4311-ae56-2253a44846a9 72338ea8-a490-43cf-81b8-478f16e6f6a9 1381f5b6-f62a-44d4-889d-7d702dc737e6 bd8c0746-7ff9-4f30-8f27-cc09cd2c9c75 1781b19a-5be5-44d2-89e0-e8130b134805
“

Wendy and the team were fantastic to work with, they clearly understood what we were trying to achieve and made sense of a complex and sensitive issue that is critical to our business. We see LS Law as a long-term partner and supplier of knowledge. The service was of the highest quality, on time and on budget! They were a pleasure to work with!

Shil Mehta
CHIEF OPERATING OFFICER, 3BP  —  Read the full case studies →
START THE CONVERSATION

Understand where your organisation stands today.

Your first conversation is with the three senior experts who will lead your engagement throughout. They'll help you understand where you are today, identify the key gaps and priorities, and discuss how these could be addressed through a tailored proposal. Any recommendations will be proportionate to your organisation's size, AI maturity and regulatory environment.

This is a confidential conversation - nothing you share on the call is used for anything other than helping us tailor the right programme to you.

FAQ

Questions we hear a lot

We're only just starting to use AI. Is it too early?
Not at all. It's often easier to establish good governance early than to retrofit it later. Even simple measures, such as clear ownership, an AI policy and practical guidance for employees, can make a significant difference as AI adoption grows.
We're a growing biotech without dedicated legal, data protection or AI governance resources.
That's a common starting point. Our programme helps growing organisations put proportionate governance in place, providing practical guidance, clear ownership and the confidence to adopt AI responsibly as the business scales.
We're a large organisation with multiple business units, subsidiaries or acquired companies.
Many larger organisations already have policies, governance frameworks and specialist teams. The challenge is often gaining a clear view across business units, regions and acquired organisations. We help leadership bring legal, cybersecurity, data protection and AI governance together into one integrated view and a prioritised roadmap.