After law school, while her peers flocked to corporate mergers and intellectual property battles, Steffi dove headfirst into the then-niche world of data privacy. She pored over the dense, 88-page text of the General Data Protection Regulation (GDPR) like it was a thriller novel. While others saw compliance checklists, she saw a framework for dignity.

Steffi Sesuraj never set out to be a hero. She set out to be a librarian in a digital world—an organizer, a guardian, and a translator. She proved that the most important code in any system wasn’t written in Python or Java. It was written in integrity.

Her most famous case, however, came when a major smart-home device company discovered a vulnerability that had been silently recording snippets of private conversations. The company’s legal team wanted to bury the report, issue a quiet patch, and hope no one noticed.