Data Protection

Support in preparing agreements and other documents relating to the processing of personal data (GDPR) – GDPR implementation, GDPR audits, data processing agreements, information clauses (GDPR clauses), data transfers, privacy policy, security policy, cookie policy.

I also work on transfers of data to third countries, including in the context of cloud services.

• GDPR implementation and audits

  Mapping of processes, registers, policies, data protection impact assessments (DPIA).
• Data processing agreements

  DPAs with vendors, processors and sub-processors.
• Data transfers

  SCCs, TIA assessments, transfers to the US and other third countries.
• AI Act

  The AI Act introduces a four-tier risk classification of AI systems. High-risk systems — including those used in recruitment, credit scoring or critical infrastructure — are subject to stringent requirements: registration, audit, transparency and human oversight. Assessing which category a given system falls into is essential.
• Data Act

  The Data Act governs access to data generated by connected devices and services — from IoT to the cloud. It introduces new user rights and obligations for manufacturers, as well as rules on switching cloud service providers.