Alfred Kouame

Following new regulatory constraints in the digital market, I joined the Risk Management Department and the DPO to help them achieve the necessary compliance, notably with GDPR and the DORA regulation.

As part of strengthening the personal data governance of Loire Forez Agglomération, I assisted the DPO in steering the community's GDPR compliance.

My goal

My mission was to structure the compliance documentation, support business departments, and contribute to the dissemination of a data protection culture

Tasks performed

Support for business departments and the 25 member organizations in their GDPR compliance projects. Mapping and qualification of personal data processing. Updating and maintaining the processing register for the 55 member organizations. Development of procedures relating to personal data breaches. Formalization of procedures for managing individuals' rights. Advice to business units on Privacy by Design and Privacy by Default principles. Preparation and facilitation of awareness-raising actions. Drafting of compliance documentation (procedures, guides, policies). Monitoring of the GDPR action plan. Conducting regulatory monitoring (GDPR, CNIL, AI Act).

Results

Improved quality of the processing register. Structured procedures relating to personal data breaches. Formalized procedures for managing rights. Support for departments in integrating GDPR requirements. Contribution to the development of a data protection culture within the community.