Andrew Graziani

Chief Security and Privacy Officer Cimpress plc

Last Reviewed: September 18, 2026

Executive Summary

Andrew Graziani is Chief Security and Privacy Officer of Cimpress plc, the publicly traded mass-customization group whose brands include Vistaprint, National Pen and Pixartprinting. He is a privacy lawyer who became a security executive from the inside: after roughly fifteen years in a series of roles across the Cimpress group, most of them as the lawyer responsible for global privacy and consumer protection at Vistaprint, he took charge of the group’s central security and privacy team in February 2022. Cimpress’s own Form 10-K cybersecurity disclosure describes the post as reporting to the Chief Technology Officer and held by someone with more than twenty years of privacy and data security experience. The combination is unusual — most security chiefs arrive from engineering or intelligence backgrounds, not from the general counsel’s office — and it shapes the role, which spans data governance and regulatory exposure as much as technical defence.

Career Highlights

• Chief Security and Privacy Officer of Cimpress plc since February 2022, leading the group’s central security and privacy team and reporting to the Chief Technology Officer.
• Described in Cimpress’s FY2026 Form 10-K, Item 1C, as having more than twenty years of privacy and data security experience and a series of roles in Cimpress over the preceding fifteen years.
• Vice President and Associate General Counsel for privacy and e-commerce at Vistaprint from 2009, also serving as the business’s Data Protection Officer and leading its global privacy and consumer protection team.
• Practised privacy and data security law as a Senior Associate at Hogan & Hartson, advising clients across multiple industries.
• Began his career in strategic communications as an Account Supervisor at Fleishman Hillard.
• Holds the Certified Information Privacy Professional (CIPP) credential.

Professional Journey

Graziani started outside the law, working as an Account Supervisor at Fleishman Hillard on strategic communications, before moving into legal practice. At Hogan & Hartson he was a Senior Associate specialising in privacy and data security — a field that in the mid-2000s was still a niche within technology law rather than the board-level concern it has since become.

In 2009 he moved in-house to Vistaprint as Vice President and Associate General Counsel with responsibility for privacy and e-commerce, and served as the business’s Data Protection Officer. That role put him at the centre of the company’s global privacy and consumer protection work through the period in which Vistaprint expanded internationally and the regulatory environment changed fundamentally, most notably with the arrival of GDPR. Vistaprint’s parent reorganised as Cimpress, and his remit broadened with it.

In February 2022 he took the Chief Security and Privacy Officer role, consolidating responsibility for security and privacy across the Cimpress group into a single central team. Cimpress’s FY2026 Form 10-K describes that team as led by an officer reporting to the Chief Technology Officer, working alongside the group’s broader risk and audit functions. His path is the reason the two disciplines sit together in one post at Cimpress: the company placed data governance and technical security under a lawyer who had already spent more than a decade owning the privacy side.

Education

University of Virginia School of Law

JD

Georgetown University

BA