Natacha Trunkwald – GC Powerlist
GC Powerlist Logo
Luxembourg 2025

Telecommunication services

Natacha Trunkwald

Head of legal | Post

Download

Luxembourg 2025

legal500.com/gc-powerlist/

Recommended Individual

Natacha Trunkwald

Head of legal | Post

Career Biography

As Head of Legal at POST Luxembourg and POST Telecom S.A., Natacha leads a multidisciplinary department covering telecom and technology regulation, corporate governance, strategic transformations, complex litigation, outsourcing/ICT, datadriven environments, and crosssector compliance (including postal and logistics). She supports the Executive Committee and Board to enable fast, safe, businessoriented decisions on critical initiatives, while modernising the legal operating model through pragmatic, governed use of technology. Her hallmark: clarity, speed, value.

 

What are the projects you are most proud of in the last 12 months?
Over the past year, my team and I have focused on transforming legal complexity into fast, secure, and business-oriented decision-making across POST’s diversified activities. I am particularly proud of three areas. The first is strategic transformations and governance. We supported critical group-level programmes by aligning legal, regulatory, and operational streams so that the Executive Committee could make informed decisions swiftly and confidently. This included strengthening board governance, refining delegation frameworks, and stress-testing decision-making pathways to enhance clarity and accountability. The second area is cross-sector regulatory enablement. POST operates beyond telecom regulation, with activities spanning postal services, logistics, ICT, and data-intensive environments. We developed repeatable legal playbooks to navigate evolving regulatory frameworks, including outsourcing, ICT requirements, and financial-sector-adjacent constraints, enabling the business to innovate confidently while embedding the right controls from the outset. The third area is modernising the legal function. We accelerated our legal operating model by implementing structured matter triage, risk-based prioritisation, and technology-enabled delivery, including the pragmatic use of AI and Copilot under robust governance. The objective was always clarity, speed, and value creation. These achievements reflect a collective effort, with a multidisciplinary legal team working closely alongside business leaders, IT, security, audit, finance, and compliance functions.
 
What sets you apart from other in-house counsel?
What differentiates me is a combination of a founder-like bias for action, technology-driven pragmatism, and executive-level clarity delivered with empathy. I translate complex regulatory requirements into practical business levers and design decision frameworks that leaders can apply immediately. I focus on building modern legal teams that are rigorous yet agile. My approach is rooted in co-creation with business teams—bringing structure without slowing momentum and ensuring that stakeholders feel heard, supported, and empowered. I am comfortable operating across the full legal spectrum, from strategic advisory and operational decision-making to complex contract negotiations and litigation management. I combine analytical discipline with human connection, firmly believing that trust, clarity, and partnership accelerate sound decision-making. My guiding principle remains simple: clarity, speed, and value, delivered through collaboration and empathy.
 
What strategies do you employ to ensure the successful digital transformation of a legal department while maintaining compliance with data protection laws?
Successful digital transformation begins with a clearly defined operating model. My approach prioritises process, people, and governance before tools. I identify relevant use cases, classify data, define risk tiers, and embed privacy-by-design principles to ensure workflows are regulator-ready and technically sound. AI and automation are deployed only within strict compliance parameters, respecting GDPR and sector-specific constraints. This includes considering on-premises solutions where appropriate, conducting rigorous vendor negotiations, implementing strict validation pathways involving data protection officers and compliance experts, and adopting a formal internal AI usage charter that defines acceptable use, data boundaries, and human oversight responsibilities. Controlled pilot programmes, data protection impact assessments where required, and strong human-in-the-loop supervision are integral to this framework. Equally important is the human dimension of change management. I invest time in open dialogue, practical demonstrations, and targeted training to address concerns, clarify misconceptions, and prevent poor practices from taking root. Digital transformation is not solely technical. It is fundamentally human, and empathy-driven leadership is key to unlocking adoption and sustained success.
 
Based on your experiences in the past year, are there any trends in the legal or business world you think other in-house lawyers should be mindful of?
Several trends deserve close attention. First, operational regulation is becoming increasingly demanding. Frameworks such as DORA and NIS require not only compliance but demonstrable evidence of compliance, with stronger integration between legal, IT, and security functions. In Luxembourg, the long-standing PSF de support regime represents a competitive advantage by embedding operational discipline, governance rigour, and trusted-service standards into organisational DNA. Second, disputes, criminal risks, and fraud are escalating in scale and sophistication. Fraud schemes are increasingly international and coordinated, raising expectations for litigation readiness, negotiation agility, and proactive cooperation with regulators and enforcement authorities. Third, AI governance and data-driven enforcement are accelerating. Regulatory authorities are moving toward proof-based supervision, where auditability, explainability, and lifecycle control are critical. Legal teams must therefore evolve from gatekeepers to architects of trustworthy digital ecosystems, actively guiding transformation rather than merely validating it.

Related Powerlists