Freelancer profile translated to English.

Description

Securing your compliance while supporting your business needs requires both regulatory and operational expertise.

As a senior consultant specializing in personal data protection with over 7 years of experience in GDPR and AI regulation (AI Act / RIA), I assist organizations of all sizes and sectors throughout the entire compliance process, in their data governance, risk management, and compliance projects.

I work with a pragmatic, agile, and educational approach, adapted to operational realities. Together, let's transform regulatory requirements into a lever for trust, risk control, and performance.

My areas of intervention:

=> Governance: Outsourced DPO or support for your internal DPO.

=> Diagnosis & Risks: Audits, mapping, record keeping, and Impact Assessments (AIPD).

=> Security: Review of subcontractor agreements and data breach management.

=> Human Factor: Training, team awareness, and regulatory watch.

Why work together?

I regularly support consulting firms and large corporations as reinforcement on GDPR, data governance, and AI Act preparation missions.

To handle temporary team overload, projects requiring specific expertise, or the need to accelerate a regulatory project, I work as a freelancer with quick availability. For your information, you can find client recommendations from my recent missions on my LinkedIn profile - "Linkedin : in/b-aubert"

If these topics are currently among your challenges or those of your clients, I would be delighted to discuss them with you.

Best regards

Languages

English
Fluent
French
Native or bilingual

Workplace preferences

Can work on-site

Paris (up to 50km), Paris (up to 100km)

BNP Paribas
Data Protection Consultant
BANKING AND INSURANCE
October 2022 - May 2026 (3 years and 7 months)
Paris, France
Context: Covering all operational compliance tasks within a team of 2 people on data protection issues related to GDPR & AI Act.

Management and deployment of GDPR compliance systems (audit, roadmap, action plans, remediation tracking)
Maintenance of records (processing, data breaches, rights requests)
Analysis and processing of new GDPR and AI projects (privacy by design) - Conducting DPIAs (9) and defining action plans
Review of contracts and GDPR clauses / DPA
Website compliance (7) and ePrivacy obligations
Drafting of internal documents, procedures, and guides
Training and awareness for employees
Reporting and presentations in Data committees
Processing Records Contract Review DPIA AI Act Compliance Privacy by Design
ARVAL
Data Protection Consultant
BANKING AND INSURANCE
June 2021 - October 2022 (1 year and 4 months)
Rueil-Malmaison, France
Context: Intervention within the Data Protection Department in close collaboration with the DPO, in a context of deploying and structuring the GDPR framework at the company level. Transversal support for business departments and support functions on compliance, data governance, and risk management issues related to personal data processing.

Management and update of the record of processing activities (ROPA)
Processing of personal data breaches
Management of a data deletion project
Monitoring of cookie and ePrivacy compliance
Drafting of GDPR documents and guides
Training and awareness for teams
Reporting and participation in Data committees
Processing Record DATA BREACHES GDPR Awareness Privacy by Design GDPR Risk Analysis
Compagnie des Alpes - Filiale de la CDC
GDPR CONSULTANT
ENTERTAINMENT AND LEISURE
October 2020 - June 2021 (8 months)
Paris, France
Context: Mission to support the Group DPO in managing the GDPR compliance of Compagnie des Alpes entities (subsidiary of Caisse des Dépôts), covering multiple sites (23 entities in France). Intervention in a decentralized environment requiring coordination, harmonization of practices, and maturity increase for local DPOs.
Audit of compliance and evolution of process implementation within group companies
Audit of processing records
Development of associated action plans
Work on personal data lifecycle management measures
Work on contractual compliance management of Subcontractors,
Consent management, cookie policy, etc.
Compliance Audit Processing Record Cookies GDPR Audit GDPR Support