LHR Consult

When quality matters

LHR Consult offers services related to quality management, operations and production, information security/data privacy, environmental protection, business ethics and legal advice within the health-care business, e.g. tissues & cells, assisted reproduction, pharma and biotech.

What Colleagues/Clients Say

Trusted by leading healthcare organizations across Europe

Services

Expert consultancy for healthcare, pharma, biotech, and fertility sectors

Tissues/Cells & Assisted Reproduction

Specialist consultancy for organisations operating in the tissues, cells, and assisted reproduction sector, supporting regulatory compliance, quality, safety, and ethical practice across the full lifecycle of donated and clinical materials, in line with applicable legal and regulatory frameworks.

Governance, Compliance & Quality

Support for healthcare and life science organisations in establishing and maintaining effective governance, compliance, and quality frameworks that meet regulatory, ethical, and operational requirements—while enabling consistent oversight, accountability, and operational excellence.

Information Security & Privacy

Guidance on the secure, lawful, transparent, and responsible management of information and personal data. Supporting compliance with applicable legal and regulatory requirements, strengthening organisational resilience, reducing risk exposure, and maintaining trust with clients, employees, partners, and regulators.

Tissues/Cells & Assisted Reproduction

Since 2012, I have gained extensive hands-on experience in the tissues/cells and assisted reproduction sector, working in highly regulated environments across both operational and leadership roles. My background includes positions such as Quality Director, Chief Operating Officer, Responsible Person, Data Protection Officer, and independent consultant, supporting fertility clinics and sperm banks with their regulatory, quality, and governance obligations.

I have worked across the full spectrum of activities within assisted reproduction and tissue establishments – from day-to-day operations and donor management to strategic quality systems, regulatory compliance, and authority engagement. This combination of practical operational insight and regulatory expertise allows me to translate complex requirements into clear, workable solutions tailored to each organization’s size, maturity, and risk profile.

This background enables me to support clients across the full tissues/cells and assisted reproduction lifecycle, providing structured, pragmatic, and regulator-ready services.

Regulatory Compliance & Authorization

Support to meet national/international regulatory requirements for tissues/cells, and assisted reproduction technologies (ART). Includes regulatory gap analysis/compliance mapping, application process/licensing, new affiliates/collection sites, interaction with competent authorities and acting as Responsible Person (GxP, ICH, EDQM, ESHRE, ESHG, WHO etc.).

Donor Management & Donor Safety

Frameworks to protect donors and ensure ethical and safe donation practices. Includes donor eligibility criteria, screening processes, risk assessment, compensation policies, follow-up procedures, release and acting as COO – with full responsibility for operations, production and the donor value chain.

Clinical & Laboratory Governance
Structures to ensure safe, effective, and evidence-based clinical and laboratory practice. Includes equipment oversight, validation, performance monitoring, providing expertise and guidance on safety and precautionary measures, monitoring threats from infectious diseases (ECDC, CDC, WHO etc.), and acting as COO – with full responsibility for operations/production (ISO 15189/23162 etc.).
Quality Management Systems (QMS)

Design, implementation, and maintenance of QMS aligned with sector standards and regulations.

Includes SOPs, document management (DMDC, Novax, D4 Infonet etc.), change management, CAPA, continuous improvement (digitation, automation, etc.) and integration of standards and sector-specific guidance (ISO 900X, EFQM etc.).

Traceability & Vigilance

Systems to ensure full traceability from donor to recipient and beyond. Includes coding and labeling, record retention, management of adverse reactions/events, deviations, complaints/claims, root cause/trend analysis, CAPA planning, reporting obligations, recall procedures, and vigilance systems.

Risk Management & Patient Safety

Risk-based approaches to protect patients, donors, and future children (procurement, cross-contamination, mix-ups, traceability etc.). Includes risk assessments (ISO 31000, FMEA etc.), critical process analysis, incident management, and preventive controls.

Ethics, Consent & Patient/Dono/Donor Child Rights

Governance of ethical decision-making and protection of individual rights. Includes informed consent processes, embryo disposition policies, donor and child rights considerations, and ethical oversight structures.

Data Protection & Information Governance
Compliance with data protection and confidentiality requirements for sensitive reproductive and genetic data. Includes GDPR alignment, access control, data retention, traceability records, and staff training (see separate Service).
Audit, Inspection & Authority Readiness
Preparation for inspections, audits, and regulatory reviews. Includes internal/stakeholder audits, inspection readiness assessments, CAPA planning, and post-inspection follow-up.

Governance, Compliance & Quality

Drawing on a solid background in regulated industries and government authorities – including pharmaceuticals, fertility, and specialist medical practices – I support organisations in navigating complex regulatory, governance, and quality landscapes. My experience spans product and service quality, patient and consumer safety, business ethics, and scientific research, helping clients meet both regulatory requirements and organisational objectives.

With extensive hands-on experience across a wide range of products and services, I bring deep expertise in quality management and a thorough understanding of the regulatory and ethical foundations of governance, compliance, and quality. I offer a practical, structured, and implementation-focused approach, supporting organisations in operating confidently, efficiently, and in full alignment with applicable regulations and quality standards.

As a subject matter expert, I provide guidance, training, project leadership, and oversight in complex, multi-stakeholder environments – ensuring that governance, compliance, and quality frameworks are not only designed, but effectively embedded and sustained in practice. This expertise enables me to support clients with a broad range of governance, compliance, and quality services, including:

Regulatory & Legal Compliance

Ensuring alignment with applicable laws, regulations, and sector-specific requirements. Includes mapping and interpreting regulatory frameworks, licensing and accreditation support, compliance gap assessments, and readiness for audits and inspections (GxP, ICH, EDQM, WHO, ESHRE, ESHG, ISPE, PIC/S, ISO etc.).

Clinical Governance

Establishing frameworks to maintain and continuously improve clinical standards and outcomes. Includes development of clinical policies and procedures, performance monitoring, evidence-based practice frameworks, accountability structures, and staff guidance and training. Quality principles are integrated into clinical processes to ensure consistent standards and safe, high-quality patient care.

Quality Management Systems (QMS) & Continuous Improvement

Design and implementation of structured quality and management systems that support consistent performance, compliance, and continuous improvement. Includes SOP development, document control, change management, CAPA processes, and initiatives such as digitisation and process optimisation (e.g. ISO 9001/14001/45001 and EMAS).

Risk Management & Patient Safety

Identification, assessment, and mitigation of clinical and operational risks. Includes establishment of risk management frameworks, risk registers, incident reporting systems, root cause analysis, safety culture development, emergency preparedness, and staff training (GxP, ICH, EDQM, FMEA, ISO 31000/22301 etc.). 

Ethics & Consent Governance

Ensuring ethical practice and protection of patient, consumer, and donor rights. Includes informed consent processes, ethical review structures, rights protection frameworks, conflict of interest management, and organisational guidance in areas such as clinical research and emerging technologies. Quality principles underpin all ethics and consent procedures to maintain integrity and accountability.

Audit, Inspection & Regulatory Assurance

Preparation for and management of audits and inspections. Includes internal and external audits, inspection readiness, CAPA planning, performance monitoring and reporting, regulatory follow-up, and training to support confident engagement with authorities. Quality-focused audit and assurance processes help maintain consistent standards across the organisation.

Organizational Governance, Strategy & Oversight

Establishing clear governance structures that support effective decision-making, accountability, and strategic alignment. Includes governance frameworks, roles and responsibilities, policies and procedures, stakeholder management, leadership reporting, and alignment of governance, compliance, and quality activities with organisational objectives.

Information Security & Privacy

With extensive experience as a Data Privacy Specialist/Data Protection Officer (DPO), I have supported organisations across the fertility sector, pharmaceutical industry, health-tech and consultancy environments in managing privacy, data protection, and information security requirements across multiple jurisdictions.

I have led end-to-end privacy and information security programs in highly regulated and operationally complex settings involving large volumes of sensitive and special-category personal data, confidential business information, multiple data subject categories, extensive vendor and processor networks, and intricate processing and information management activities. My experience spans tissue and cell donation, assisted reproduction, pharmaceutical development/surveillance, healthcare platforms and scientific/clinical research.

I bring a practical, business-aware approach that integrates regulatory expertise with risk management, governance, and operational resilience. My focus is on delivering clear, proportionate, and actionable advice, that enables organisations to meet compliance obligations, strengthen security posture, manage risk effectively, and build sustainable trust.

Based on this experience, LHR Consult offers tailored information security and privacy services designed for organisations operating in regulated, high-risk, and data-intensive environments.

Governance & Accountability

Establishing effective governance structures to manage information security and privacy strategically and sustainably. Includes governance frameworks aligned with recognised standards (ISO 2700X/ 27701/29100, CIS, NIST etc.), board-level reporting and oversight structures, role definition and accountability (DPO, Information Security Lead, EU Representative), Records of Processing Activities (RoPA), policy ownership and lifecycle management, and structured breach and incident governance processes.

Legal & Regulatory Compliance

Ensuring alignment with applicable data protection, information security, and sector-specific legal requirements. Includes GDPR and local data protection law compliance, sector-specific regulatory requirements (healthcare, scientific research, labour law, marketing, financial record-keeping), lawful basis and consent assessments, regulatory gap analysis, compliance reviews, documentation support, and regulatory readiness across jurisdictions.

Security Risk Management

Identifying, assessing, and mitigating information security and privacy risks before they materialise. Includes enterprise security risk assessments, privacy risk assessments, Data Protection Impact Assessments (DPIAs), high-risk processing reviews, threat and vulnerability considerations, risk treatment planning, and alignment with recognised risk management methodologies.

Security Controls & Assurance

Strengthening organisational safeguards to protect information assets effectively. Includes security control gap analysis, evaluation of technical and organisational measures, access control and data classification frameworks, retention and deletion controls, assurance reviews, and support in preparing for certification or regulatory scrutiny where applicable.

Privacy Management & Individual Rights

Embedding structured privacy management processes and enabling lawful, effective handling of individual rights. Includes development of privacy frameworks, transparency and notice requirements, DSAR processes, right to erasure, rectification and objection handling, response workflows and templates, timeframe monitoring, and support for complex or high-risk rights requests.

Third-Party & Supply Chain Risk

Managing privacy and security risks arising from vendors, processors, and data-sharing arrangements. Includes vendor due diligence and risk assessments, data processing agreements (DPAs), joint controller and data-sharing arrangements, international data transfer assessments, contractual security provisions, and ongoing supplier risk monitoring and oversight.

Secure & Privacy-Centric Design

Embedding security and privacy principles into systems, projects, and organisational change. Includes privacy-by-design and security-by-design advisory, new system and technology reviews, data minimisation and purpose limitation guidance, secure development lifecycle input, technical and organisational control recommendations, and support for transformation initiatives and new product development.

Incident Response & Resilience

Preparing for, responding to, and learning from security and data protection incidents. Includes incident response framework design, breach identification and assessment processes, regulatory notification support, communications guidance, post-incident remediation planning, lessons-learned integration, and resilience strengthening measures.

About

I am a biochemist by training, with a career built at the intersection of science, regulation, and trust. After completing my Master’s degree at the University of Copenhagen, I have worked in full-time roles across drug development, patient safety, regulatory affairs, and compliance in both industry and government, including positions at leading pharmaceutical companies, contract research organisations and the Danish Medicines Agency.

In 2012, I moved into the fertility sector, where I spent eight years in senior, hands-on roles supporting the growth of a rapidly expanding Danish sperm bank into a leading European organisation. During this period, I was responsible for managing and developing quality, governance, and data protection activities, establishing robust frameworks that met complex international regulatory requirements while enabling innovation and scalability.

In 2020, I founded LHR Consult to bring this practical, real-world experience to other organisations. Since then, I have combined consultancy work with senior operational and leadership roles in the fertility and information security space, including supporting the launch of new regulated businesses from the ground up. 

My approach is collaborative, pragmatic, and focused on helping organisations navigate complexity with confidence.

I thrive in dynamic, international environments characterized by shifting and competing priorities, a wide range of tasks, and broad stakeholder engagement. With a strong attention to detail, accuracy, and compliance, I approach challenges across departments, disciplines, and solutions with a holistic mindset. At the same time, I advocate for balance and recognize the importance of pragmatic, action-oriented solutions in this context.

I am a good listener, coach, and motivator, and I collaborate easily and effortlessly across professional groups. My strong communication skills enable me to engage at all levels, build sustainable and trust-based relationships, and convey complex issues in a professional and easily understandable manner.

With a strategic and business-oriented approach, I am experienced in meeting the needs and expectations of stakeholders, delivering results, and providing high-quality solutions – a key prerequisite for customer satisfaction and loyalty, as well as the organization’s long-term success.

Post-Educational Training & Expertise

I hold multiple post-educational certifications spanning GxP, quality management, risk, auditing, project management, medical genetics, and business continuity, reflecting a broad and rigorous professional foundation. I regularly serve as a subject matter expert, providing strategic advisory services, specialist training, and thought leadership across complex quality, compliance, and governance initiatives.

Within the fertility sector, I have extensive experience collaborating closely with fertility clinics, sperm banks, laboratories, accreditation bodies, regulatory authorities, and ethics committees. This hands-on engagement enables me to bridge regulatory expectations with clinical and operational realities. I also contribute actively to the advancement of the field through lectures, webinars, and professional activities within national and international fertility societies and organisations (e.g. IFFS, SRF, ESHRE, EFS, NFS, and DFS).

In the area of data protection and privacy, I hold advanced and internationally recognised certifications, including CIPP/E, CIPM, IAPP Fellow of Information Privacy, and GDPR Master Class. This formal expertise is complemented by substantial practical experience in privacy governance, risk, and compliance (GRC) and the implementation and use of enabling technologies, including OneTrust. I have collaborated closely with leading data protection practitioners at top-tier law firms and maintain active participation in professional forums and knowledge-sharing platforms (IAPP, OT DataGuidance, DPO Association of Denmark etc.), ensuring continuous alignment with regulatory developments and best practices.

This integrated and cross disciplinary expertise allows me to deliver consultancy services that are pragmatic, compliant, and strategically aligned, supporting organisations in navigating complex regulatory landscapes while sustaining operational excellence, stakeholder confidence, and trust.

Projects Completed to Date

  • Establishing, reviewing, and managing quality management systems, including processes and controlled documentation, supported by platforms such as D4Infonet, DMDC, and Novax, to ensure regulatory compliance and operational consistency.
  • Conducting gap analyses across quality, privacy, and regulatory content, including reviews of websites and other public-facing materials, to identify compliance risks and define clear remediation actions.
  • Managing contracts and third-party engagements, supporting the selection, onboarding, and oversight of service providers to ensure alignment with regulatory, quality, and data protection requirements.
  • Planning and executing internal audits and inspection readiness activities, including preparation for regulatory inspections, coordination during inspections, and follow-up on findings to achieve successful outcomes.
  • Supporting regulatory approvals and permit management, including applications for new permits and variations to existing approvals, ensuring timely and compliant submissions.
  • Providing senior quality and compliance oversight for fertility clinics, acting as Responsible Person to support safe operations, regulatory compliance, and continuous improvement.
  • Providing strategic and operational advice to sperm bank start-ups, covering approval pathways, regulatory strategy, quality system design, and legal requirements from initial concept through operational readiness.
  • Advising on regulatory, ethical, and data protection requirements related to offering polygenic risk scores as a service, including assessment of legal frameworks, risk considerations, and compliance obligations.
  • Establishing electronic document management systems (EDMS) and implementing structured change control and deviation management processes within biotech organisations to support compliance, traceability, and continuous improvement.
  • Conducting privacy gap and maturity assessments and developing GDPR-aligned privacy documentation for organisations in the public healthcare sector, biotech companies, and fertility clinics.
  • Designing and implementing comprehensive privacy and information security programmes, aligned with international standards, providing ongoing oversight and advisory support, and acting ad Data Protection Officer within pharmaceutical organisations.
  • Supporting the implementation of ISO 27001-aligned information security management systems within pharmaceutical consultancies, strengthening governance, risk management, and regulatory assurance.
  • Advising biotech organisations on medical device regulation, including MDR requirements and preparation for ISO 13485 certification, from regulatory strategy through implementation support.

Reach out!

Get in touch to discuss

LHR Consult, Copenhagen/Denmark

CVR-no. (VAT): 3415 9726