Dafina Bucaj Esq. - Octillo Data Privacy Lawyer

Dafina Buçaj, Esq.

Certified Information Privacy Professional/United States (CIPP/US) and Certified Information Privacy Manager (CIPM).

Dafina Buçaj is an experienced privacy attorney with a broad background in data privacy, cybersecurity, and public policy.

At Octillo, Dafina counsels and advises clients on the development and implementation of enterprise-wide data security and privacy programs and regulatory compliance under federal, state, and international privacy regulations. A large portion of her practice is dedicated to assisting global organizations in the creation of right-sized data security and privacy programs that are customized to the unique needs of Octillo’s clients, addressing compliance with numerous global regulations, including the GDPR, PIPIEDA, CASL, POPIA, LGDP, PIPL and other emerging privacy and security laws. Dafina also reviews existing data security and privacy protocols to work with clients to mitigate legal risk by identifying vulnerabilities and implementing procedures and controls using practical, cost-effective solutions.

The scope of Dafina’s practice includes data privacy and security regulatory assessments, information privacy and security protocols and policies, external policies, data collection, vendor risk assessments, contract development and review, and threat mitigation plan development.

Prior to joining Octillo, Dafina served as Data Privacy and Security Manager for a major not-for-profit organization, where she spearheaded the development and implementation of a large-scale global privacy program, including a vendor risk management policy and procedures for cross-border data transfers, risk mitigation, and compliance with global privacy regulations. She has served in several prominent legal positions for the Government of Kosovo, including as legal Adviser to the Deputy Prime Minister and Minister of Justice and as a Legal Professional working with international organizations (OSCE, UNDP, USAID).

Dafina is currently pursuing a Doctor of Juridical Science (J.S.D.) degree from Loyola Law School with a focus in Cyber Law.

Dafina is a Certified Information Privacy Manager (CIPM) and a Certified Information Privacy Professional for the United States (CIPP/US). She is fluent in English, French, and Albanian.


  • Doctor of Juridical Science (J.S.D.), Loyola Law School, Los Angeles, CA 2022 (expected)
  • University of Cambridge, (LL.M), 2012
  • University of Prishtina, Kosovo, Bachelor’s degree, Law (JD equivalent), 2011
  • University of Prishtina, Kosovo ,Bachelor’s degree, Journalism, 2011


  • Nevada


  • International Association of Privacy Professionals (IAPP), Member