Katharine Tomko

About

I help companies understand how AI is changing their business and build the governance needed to manage it without slowing innovation. I spent nearly ten years at Facebook, where I built and ran global privacy programs and worked closely with product, engineering, legal and security teams to embed Privacy by Design as the company scaled. I then spent six years as a Partner at an enterprise software venture fund, evaluating more than 100 technology companies and advising founders and boards on privacy, security, data governance and enterprise readiness. That combination taught me to look across an organization rather than at risk in isolation. A product decision can create a privacy problem. A vendor choice can create a technical dependency. A customer commitment can create an engineering obligation. With AI, those connections are becoming harder to see and more consequential. I help companies identify where AI is being used, assess AI and privacy risk, review data and third-party dependencies, build practical governance and Privacy by Design processes, and prepare for enterprise customers, boards and regulators. I also work with VC funds on privacy, security and AI diligence before investment. I have spent much of my career studying how people and organizations make decisions under uncertainty. I am also a certified HeartMath resilience trainer and have developed workshops on judgment and decision-making under pressure. That work informs how I approach governance: policies only work when people understand how to make good decisions when the answer is not obvious. My goal is simple: give leadership the visibility to understand how AI is changing the organization while there is still time to act.

What to expect

• AI Readiness Assessment