“Let’s play a game,” she announced to the skeptical engineers.
Word spread. Steffi Sesuraj didn’t just write policies; she built empathy. She was invited to speak at major tech conferences, where she famously tore up a standard 15-page terms-of-service agreement on stage and held up a single, postcard-sized document instead. “This,” she said to a silent auditorium of thousands, “is all a user actually reads. Make the rest matter.”
It was a radical shift. Suddenly, privacy wasn’t a legal shackle. It was a design challenge. The team started building “privacy by default” settings, simplified data download tools, and clear, cartoonish icons that told users exactly what data an app was using, in real time. Steffi Sesuraj
She drafted a radical transparency report: a full, public disclosure of the vulnerability, a step-by-step guide on how to delete the compromised data, and a free, in-person data clinic for affected users. The board thought she was insane.
Steffi refused.
Her big break came when a social media startup, reeling from a public breach of user location data, hired her as their first Data Protection Officer. The engineering team saw her as a “no” person—a roadblock. The CEO saw her as a necessary evil.
Steffi Sesuraj never set out to be a hero. She set out to be a librarian in a digital world—an organizer, a guardian, and a translator. She proved that the most important code in any system wasn’t written in Python or Java. It was written in integrity. “Let’s play a game,” she announced to the
“You can fix a bug in a week,” she told the board, her voice calm but absolute. “You take a decade to rebuild a broken trust.”