Women in security and privacy (WISP) Munich

Dr. Natallia Karniyevich has more than a decade of experience in European cybersecurity and data protection law and advises multinational companies on complex cybersecurity matters. She helps clients navigate rapid technological change and an increasingly demanding regulatory environment.

Natallia focuses on European cybersecurity regulation and resilience. She supports clients across the full cybersecurity lifecycle – from designing and implementing cybersecurity and resilience programs, delivering cybersecurity training and establishing regulatory compliance frameworks to responding to cybersecurity incidents and managing their regulatory aftermath.

One of the key areas of Natallia’s practice is leading complex, multijurisdictional projects on the implementation of the NIS2 Directive and the Critical Entities Resilience Directive. She also advises clients on emerging and evolving cybersecurity requirements, including those under the Cyber Resilience Act, Cybersecurity Act, Cyber Solidarity Act and DORA, as well as on the cybersecurity dimensions of artificial intelligence, including under the EU AI Act. Her clients include operators of data centers and other digital infrastructure, digital service providers, critical infrastructure operators, and leading companies in the manufacturing, automotive, food, transportation and healthcare sectors.

Natallia is a member of the IAPP Cybersecurity Law Center Advisory Board and a frequent author and speaker on cybersecurity law. She is a co-author, among others, of the ninth edition of the International Comparative Legal Guide – Cybersecurity 2026 and of Casebook European Data Law – Ten Years of the GDPR: A Milestone in EU Data Regulation (Nomos, 2026), and a guest lecturer at the Frankfurt School of Finance & Management.