Privacy compliance isn’t just about checking boxes — privacy compliance it’s about building trust and enabling responsible growth. I support you with:

• Developing tailored data protection programs aligned with your business model and sector.

• Drafting and maintaining Records of Processing Activities (ROPA) that are scalable and audit-ready.

• Defining and documenting technical and organizational measures (TOMs) to secure personal data.

• Conducting Data Protection Impact Assessments (DPIAs) and Transfer Impact Assessments (TIAs).

• Structuring and reviewing international data transfers — from SCCs and BCRs to vendor onboarding.

• Designing cross-border compliance strategies for multinational organizations.

• Advising on the implementation of data protection management systems (DPMS) that integrate with your operations.

Effective privacy management requires more than policies — it needs seamless integration into daily workflows. I help you with:

• Drafting and negotiating data protection agreements, including data processing agreements.

• Setting up internal role and access concepts that reflect real-world responsibilities.

• Advising on data subject requests (DSARs) with efficient, scalable processes.

• Reviewing and adapting data protection in connection with employment law

• Delivering targeted employee trainings to build awareness and reduce risk.

Your products and campaigns should win users — not trigger audits. I support you in embedding privacy from the ground up:

• Reviewing digital products, platforms, and features to ensure Privacy by Design and by Default.

• Structuring consent flows and cookie banners.

• Vetting third-party tools.

• Developing data processing strategies for advertising, analytics, and growth initiatives.

• Advising on lawful bases for processing, including balancing tests for legitimate interest.

When the heat is on — a breach, a fine, a regulator at the door — you need calm, strategic support. I help you with:

• Representing your business in regulatory investigations, audits, and administrative proceedings.

• Breach notification processes from start to finish.

• Communicating with supervisory authorities — proactively or defensively — to manage exposure.

• Defending your company in proceedings, including damages claims by data subjects.

• Designing prevention strategies and internal remediation plans after a privacy incident.