Carole Desgoutes Wojtkowiak

Freelance Senior Consultant - GDPR compliance and cyber compliance (Dora, Nis 2, AI Act...)

- Training & Awareness - GDPR / Cybersecurity / AI ACT

- Outsourced DPO

- Diagnostic missions with gap reports & remediation plans

- Cross-compliance (GDPR / Dora / Nis2...)

- Complex DPIAs

- IT Department Support

- Physical security and server security audits

Internal Senior Consultant in data compliance, GDPR, AI Act.

Healthcare, luxury & hospitality, banking and finance, non-profit & medico-social sectors

- GDPR compliance implementation. Outsourced DPO missions. Project management.

- Diagnosis, action plans, GDPR compliance maintenance.

- Support and diagnosis on IS security governance and development of action plans.

- TIA and PIA analysis (HR, IT tools in the healthcare sector...).

- Negotiation and drafting of NDAs and DPAs.

- Trainer on GDPR, AI Act, Privacy by Design, cybersecurity "good hygiene".

Consulting in personal data protection and GDPR compliance, external DPO for approximately 20 entities (healthcare, luxury, international transport, new technologies...)

- Compliance audits, website and cookie audits, development of compliance plans, and deployment of tasks.

- PIA support and drafting of legitimate interest notes.

- Management of data subject rights requests, and CNIL complaints.

- Data breach management and notification to the supervisory authority.

- Validation and drafting of subcontracting and co-responsibility agreements.

- Drafting and advice on privacy and cookie policies.

- Security and cybersecurity consulting support, ISO 27001.

- Support during a CNIL audit.

- Trainer on international data transfers, DPO profession, and Supervisory Authorities.

- Legal watch, translation of deliverables.