Esther García Encinas is Head of the Privacy and AI Office at CaixaBank, Spain’s leading financial institution, within the Data Protection Officer Department. She has led the implementation and continuous evolution of the GDPR at CaixaBank since its adoption, having also participated in the pre legislative discussions preceding the Regulation. Esther oversees group wide privacy governance and AI governance programmes, including the implementation of the EU AI Act, with a strong focus on AI risk management to fundamental rights. Esther is a regular lecturer on data protection and AI governance, contributes to professional training programmes, and has participated in several publications, including the recently published “Model for Fundamental Rights Impact Assessments: guidance and use cases” by the Catalan Data Protection Authority.