Alexandre Rattaire

I combine my legal expertise with my technical knowledge to ensure the digital sustainability of organizations and make these issues a growth lever through precise strategic management.

External Data Protection Officer, expert in privacy protection, cybersecurity consulting, and data organization.

I assist companies and public entities in their digital transition, their compliance with regulations in the field (GDPR, NIS 2, DSA, etc.), and their internal operations concerning data.

I lighten the regulatory burden by proposing adapted compliance and taking charge of current obligations (management of impact assessments, management of data subject requests and data breaches, etc.).

I turn data protection into an asset that enhances their business with their clients and a competitive lever.

My mission was twofold:

- To take over from the previous Data Protection Officers who had held this position since the GDPR came into effect;

- To structure and consolidate a shared team at the level of the large institution Université Grenoble Alpes.

I was thus able to:

- Update the record of processing activities and monitor incident and data subject request records;

- Reactivate the internal network of referents;

- Formalize essential impact assessments;

- Provide compliance documentation (fact sheets, guides, and procedures);

- Deliver an operational intranet space;

- Guide and consolidate the shared service and its relays within the affiliated institutions.

In particular, within this framework, I supported one of the institutions in depth in its compliance, which required a complete overhaul. The result: a fully determined record of processing activities, established procedures, and an operational action plan by priority department.

My first high-responsibility position: to imagine, formalize, structure, animate, and control, from scratch, the compliance of the local authority with the GDPR.

The task was not easy, but with excellent support, I accomplished it step by step:

- Creation, deployment, and monitoring of the GDPR compliance plan;

- Training of staff on the regulation and its practical application within their roles;

- Organization of work procedures: identification and declaration of processing activities, management of data subject requests, CNIL controls, etc.;

- Creation of the entire documentation suite: legal registers, guides and practical sheets, procedures, charters, etc.;

- Management of data subject requests;

- Implementation of data protection impact assessments (DPIAs);

- Structuring of departments and services with the creation of a network of referents in each department and a cross-functional working group composed of data experts (DPO, CISO, Archivist, PRADA, and IT Architect);

- Formalization of a complete intranet space, the hub of information and action for services on data protection.

Through these actions, I ensured the compliance of key processing activities for the confidentiality of the residents of Haute-Savoie and sowed the seeds of a true data and privacy protection culture within the institution.