Margarida Vaz

Margarida is a partner at BMA.


She practises within the firm’s Litigation Department, with particular focus on civil, criminal and administrative law. Throughout her consolidated and cross-sector career, she has combined strong courtroom experience with strategic advisory work in complex regulatory matters, currently focusing her practice primarily on Data Protection.

She is certified as an EU Data Protection Officer and has completed advanced training in Data Protection Audit at EIPA – the European Institute of Public Administration.

Margarida has led numerous data protection implementation and compliance projects, conducting audits, risk assessments, internal policy development and governance framework design for both national and international organisations, with particular experience advising Public Administration entities.

She acts as a Data Protection Officer (DPO), particularly within the scientific and technological sectors, supporting organisations in ongoing compliance programmes, incident management, Data Protection Impact Assessments (DPIAs) and engagement with supervisory authorities.

She is also regularly involved in training initiatives, speaking at specialised seminars, conferences and webinars on data protection and digital regulation, and is recognised for her practical and strategic approach to GDPR compliance.

Margarida Vaz

Margarida is a partner at BMA.


She practises within the firm’s Litigation Department, with particular focus on civil, criminal and administrative law. Throughout her consolidated and cross-sector career, she has combined strong courtroom experience with strategic advisory work in complex regulatory matters, currently focusing her practice primarily on Data Protection.

She is certified as an EU Data Protection Officer and has completed advanced training in Data Protection Audit at EIPA – the European Institute of Public Administration.

Margarida has led numerous data protection implementation and compliance projects, conducting audits, risk assessments, internal policy development and governance framework design for both national and international organisations, with particular experience advising Public Administration entities.

She acts as a Data Protection Officer (DPO), particularly within the scientific and technological sectors, supporting organisations in ongoing compliance programmes, incident management, Data Protection Impact Assessments (DPIAs) and engagement with supervisory authorities.

She is also regularly involved in training initiatives, speaking at specialised seminars, conferences and webinars on data protection and digital regulation, and is recognised for her practical and strategic approach to GDPR compliance.