Freelancer profile translated to English.

Description

In many organizations, GDPR is not "done badly".

It is above all 𝗺𝗮𝗹 𝗽𝗶𝗹𝗼𝘁𝗲́ (poorly managed).

DPOs and legal teams are on the front lines, often overloaded, called in too late, forced to make decisions under pressure, with projects that move forward… or get stuck.

From the business side, GDPR is seen as a vague constraint.

From management's perspective, the risk is not clearly understood, and therefore poorly managed.

👉 Result:

🚒 Permanent GDPR 𝗳𝗶𝗿𝗲𝗳𝗶𝗴𝗵𝘁𝗶𝗻𝗴 𝗺𝗼𝗱𝗲 for the DPO and their teams

⏳ Decisions made by avoidance or excessive caution

⚠️ Lasting internal tensions

📄 GDPR remains theoretical where it should be operational

The problem is not the text.

𝐓𝐡𝐞 𝐩𝐫𝐨𝐛𝐥𝐞𝐦 𝐢𝐬 𝐭𝐡𝐞 𝐥𝐚𝐜𝐤 𝐨𝐟 𝐜𝐥𝐞𝐚𝐫 𝐫𝐢𝐬𝐤 𝐚𝐬𝐬𝐞𝐬𝐬𝐦𝐞𝐧𝐭, assumed prioritization, and understandable working rules for the teams.

🎯 This is precisely where I come in.

With a dual background in 💻 tech (IUT Multimedia, 2008) and ⚖ law (DJCE Rennes, 2014), I shifted to 🔒 privacy in 2017. I continue to cultivate this transversal approach to overcome two limitations I still encounter very often:

➡️ Highly technical profiles, strong in IT or cyber, but uncomfortable with the legal assessment of risk

➡️ Purely legal profiles, comfortable with texts, but quickly blocked when it comes to getting into the "nitty-gritty" of projects, IT systems, or organization

Concretely, 𝐈 𝐡𝐞𝐥𝐩 𝐃𝐏𝐎𝐬 and legal directors to:

🚒 Get out of GDPR firefighting mode

🔍 Clarify their actual risk level

⚖️ Accelerate project decision-making

🔧 Sustainably reduce internal blockages

… without cosmetic compliance or unrealistic promises.

I primarily work with SMEs, groups, and environments in 🏭 industry, 💡 tech, or 🛒 retail, in contexts where GDPR is already in place… but poorly integrated.

📘 linkedin.com/in/charley-dupré

Industry field of expertise

Languages

French
Native or bilingual
English
Fluent

Workplace preferences

Remote only

Primarily works remotely

Indépendant
Freelance Data Privacy
January 2025 - Today (1 year and 7 months)
Paris, France
Clarify the actual risk level
Establish real governance and solid management
Accelerate project decision-making
Sustainably reduce internal blockages …

To build a real GDPR strategy without cosmetic compliance or unrealistic promises.
Converteo
Senior Data Privacy Consultant
March 2021 - December 2024 (3 years and 9 months)
Paris, France
Responsible for GDPR mission in secondment with clients to ensure Privacy compliance for the BUILD phase (internal processes, steering committees, change management, consent strategy), and for the RUN phase (project scoping, processing documentation and register maintenance, retention periods, etc.).

Data Privacy audit and recommendation on the management of acquisition campaigns and marketing audiences…
Converteo
Senior Privacy Consultant
DIGITAL AND IT
March 2021 - Today (5 years and 5 months)
Paris, France
Senior Privacy Consultant
DPO Assistant Mission
GDPR Compliance Officer
Scoping of projects from a Privacy perspective
GDPR Compliance DPO Data Privacy Microsoft Powerpoint