Michael Spadea

Email Email       

+1 415 291 2671 direct
San Francisco

Previous Experience

  • Commercial Privacy Manager, Microsoft
  • Head of Privacy, Barclays Wealth, Barclays Bank
  • Global Privacy Counsel, Barclays Bank
  • Attorney, Spadea & Associates
  • Judicial Research Clerk, Superior Court for the State of Connecticut

Thought Leadership

  • “Managing Privacy for a Mobile and Remote Workforce,” webinar, International Association of Privacy Professionals (IAPP)
  • “Data Breach Incident Response,” webinar, IAPP
  • “Legal and Regulatory Data Protection Challenges for the Financial Services Sector,” Data Protection in the Financial Services Sector, London
  • Effective Document Collection/Legal Hold Protocols, Information Retention and E-Discovery, Brussels
  • “Online Privacy and the World of Behavioral Targeting: Challenges and Options,” RSA Conference Europe, London
  • Contributor: “Managing Brand Integrity During and After a Breach, Privacy Laws & Business,” International Guide to Privacy, American Bar Association

Home > People

Michael Spadea


Michael advises clients on a wide range of regulatory and compliance issues related to privacy and information governance, including development and implementation of global privacy programs, management of vendors, and integration of privacy into emerging technology and business models. He has deep international and incident-management experience.


Prior to joining Promontory, Michael worked at Microsoft, where he was responsible for all aspects of information governance for enterprise customers in the services division, ensuring that its information technology infrastructure was in compliance with the safe harbor framework between the United States and the European Union. He also resolved enterprise-wide customer-privacy concerns and created Microsoft’s first computerized privacy training specifically for engineers. Michael served as head of privacy for Barclays Wealth in London, where he was responsible for ensuring that all the bank’s operations, products and services were compliant with privacy laws in multiple jurisdictions. For the wealth division, he led the development of a privacy dashboard that provided real-time updates on the status of privacy risks, controls, incidents, audit points and related projects. He also conducted on-site privacy and banking-secrecy risk assessments and advised on the development of the bank’s IT infrastructure. For Barclays Bank, he was responsible for all regulator engagement on privacy issues and helped develop an innovative privacy risk assessment and mitigation program that won a Privacy Innovation Award by the International Association of Privacy Professionals. Michael also worked in the corporate privacy office of FleetBoston Financial, ran a law practice in Connecticut and Massachusetts, and clerked with the Superior Court of Connecticut.


  • J.D., Northeastern University School of Law
  • B.S., criminal justice, Northeastern University

Affiliations, Awards, and Civic Engagements

  • Former chair, Science and Technology Law Section, Connecticut Bar Association
  • Great People-Great Performance Award, Microsoft
  • Privacy Innovation Award, International Association of Privacy Professionals
  • Certified information privacy professional, International Association of Privacy Professionals, United States

Representative Engagements

Enter Below Code :