You're seeing this page as if you were . The main menu is still yours, though. Exit from immersion
Fatima GhilasseneFG

Fatima Ghilassene

GDPR Lawyer | DPO | CNIL | AI Act

€850/day
Lille, FR
15+ years

Average response time: 1 hour

Freelancer profile translated to English.
Back to original language

About Fatima

Lawyer in digital law and intellectual property, I assist companies, legal departments, DPOs, and compliance departments on high-stakes issues: GDPR compliance, CNIL controls, structuring the DPO function, IT contracts, data governance, and the AI Act.

Many companies have appointed a DPO without always having the necessary legal expertise in-house to secure sensitive processing, complex arbitration, or crisis situations.
The DPO oversees operational compliance.

I act as a strategic legal partner to strengthen the robustness of the system, secure sensitive decisions, and protect the company in case of audits, litigation, or data breaches.
I intervene in both one-off high-value-added missions (GDPR audit, DPIA, CNIL controls, IT contracts, AI Act audit) and recurring part-time support for DPOs, legal departments, compliance, and business departments.
I intervene in particular to:
  • Secure high-stakes GDPR processing
  • Structure and strengthen the DPO function
  • Prepare teams for CNIL controls
  • Audit DPIAs (PIA) and complex processing
  • Manage data breaches and sensitive situations
  • Oversee IT contracts, SaaS, and data clauses
  • Organize data and AI system governance
  • Support AI Act compliance and automated decision-making
  • Lead strategic legal arbitration
  • Protect the company in case of audits or litigation
My approach is pragmatic, business-oriented, and directly actionable:

Consolidate compliance, protect the company.
  • French

    Native or bilingual

  • English

    Fluent

Can work on-site
Lille (up to 50km), Paris (up to 50km), Bruxelles (up to 50km), Lyon (up to 50km), Nantes (up to 50km)

Experience

  • FG AVOCAT
    Digital Law Lawyer | GDPR, AI Act & IT Contracts Expert | External DPO
    LEGAL
    October 2023 - Today (2 years and 8 months)
    Lille, France
    I assist companies with strategic issues related to data protection, contracts, intellectual property, and securing digital projects.

    I intervene in both one-off high-value-added missions (GDPR audit, DPIA, CNIL controls, IT contracts, AI Act audit, digital IP pre-litigation analysis) and recurring part-time support, particularly in the context of external DPO missions or in support of internal DPOs.

    Main Interventions:

    GDPR Compliance
    • GDPR compliance audit and DPO assessment
    • Verification of the obligation to appoint a DPO and securing their mission
    • External DPO missions
    • Structuring the DPO function and data governance
    • Conducting DPIAs (PIA) and analysis of complex processing
    • Management of data breaches and CNIL support
    • Preparation for CNIL controls and management of sensitive situations
    • Support on AI Act issues and AI system governance
    • Pre-litigation and litigation assistance related to personal data
    IT & Data Contracts
    • Drafting, reviewing, and negotiating IT, SaaS, license, maintenance, and digital service contracts
    • Subcontracting agreements and management of data controller/subcontractor relationships
    • GDPR clauses, data annexes, and data processing agreements
    • Overseeing cross-border data transfers outside the EU (SCCs, DPF, contractual guarantees)
    • Contractual securing of digital projects, platforms, and artificial intelligence tools
    Training
    • GDPR training for DPOs, business departments, and compliance teams
    • Training on the legal issues of artificial intelligence (GDPR, AI Act, automated decision-making)
    • Training on IT contracts, digital compliance, and protection of intangible assets
    • Raising team awareness on data governance and responsible AI issues
    GDPR Data Protection AI Act IT Contracts Outsourced DPO
  • Groupe Hachette Livre | 2022
    Legal Manager – Transition Management
    LEGAL
    March 2022 - June 2022 (3 months)
    Paris, France
    Interim management role within a large group, assisting teams with contractual, GDPR, and intellectual property issues in a complex and highly structured environment.

    Main missions
    • Contracts: drafting, negotiation, and operational monitoring of software publishing and digital project contracts
    • GDPR Compliance: audit and support for digital projects, platforms, and marketing operations
    • Intellectual Property: advising subsidiaries on the protection and exploitation of brands, domain names, designs, and models
    • IP Litigation: defining pre-litigation and litigation strategy, drafting arguments, and negotiating with opposing parties

    Added value
    • Rapid intervention in demanding operational contexts
    • Ability to secure projects while respecting business constraints
    • Interface between legal departments, business units, and external partners
  • INPI
    Legal Research Officer – Intellectual Property Observatory
    January 2013 - December 2021 (8 years and 11 months)
    Lille, France
    Legal expertise and foresight role within INPI, dedicated to intellectual property issues related to digital and emerging technologies.

    Main Missions:

    - Legal analyses on the impacts of digital and emerging technologies (AI, blockchain, 3D printing, connected objects) on intellectual property

    - Design and coordination of sectoral and prospective studies for public authorities and economic players

    - Regulatory watch and analysis of case law in patents, trademarks, designs, and models

    - Drafting reports and publications, participation in national and European working groups

    Added Value:

    - Strong understanding of the interactions between technological innovation, regulation, and economic issues

    - Ability to translate complex subjects into actionable analyses for public decision-making

    - Recognized expertise in the links between digital, data, and intellectual property

Recommendations

Be the first to recommend Fatima

Help this freelancer shine by sharing your experience working together.

These freelancer profiles also match your criteria

AgathaA

Agatha Frydrych

Backend Java Software Engineer

4.7

(3)

2

BaptisteB

Baptiste Duhen

Fullstack developer

4.6

(4)

5

AmedA

Amed Hamou

Senior Lead Developer

4

(2)

7

AudreyA

Audrey Champion

Web developer

4.3

(3)

4

Education

  • Executive MBA
    EDHEC Business School
    2018
    Management d’entreprise, leadership, gouvernance, finance, conduite du changement, innovation, transformation digitale, stratégie opérationnelle, prise de décision, projets collaboratifs.
  • University Diploma in International Intellectual Property Studies
    CEIPI Strasbourg
    2015
    Droit des brevets, marques, dessins et modèles, contrats de PI, valorisation des actifs immatériels, protection internationale, contentieux de la PI.

Certifications

  • DATA COMPLIANCE
    SCIENCES PO PARIS
    2022
    https://pages.sciencespo.fr/2017-gtc-brochure-certif-dpo_201907-newlp.html
    GDPR compliance and data compliance – mastery of legal obligations and ability to deploy operational compliance measures. Advising management and operational support – role of DPO or data referent, aligning digital projects with legal requirements. Data project management – team coordination, step tracking, and adherence to deadlines in complex environments. Data risk mapping and analysis – identification, assessment, and prioritization of risks to guide action plans. International and interdisciplinary approach – understanding European issues and adapting to business sectors. Legal and technological watch – monitoring regulatory developments and anticipating impacts on digital projects. Global data governance management – design and monitoring of internal policies, action plans, and control processes. Security and confidentiality management - integration of privacy by design/default, breach management Pedagogical skills and awareness – ability to train, simplify, and mobilize teams around data protection issues. Drafting and negotiation of data clauses – integration of data protection requirements into contracts and partner agreements.

Skill set

Categories