You're seeing this page as if you were . The main menu is still yours, though. Exit from immersion
Malt Strategy
New report
Malt Tech Trends 2026
Hugo ParraHP

Hugo Parra

Data Protection & Privacy Consultant (GDPR)

€700/day
Paris, FR
3-7 years
GDPR Compliance
OneTrust
Risk Analysis
Audit
ISO 27001

Average response time: 1 hour

Freelancer profile translated to English.
Back to original language

About Hugo

Are you looking for an expert capable of translating GDPR requirements into concrete solutions tailored to your business needs?
I freelance to support companies (large groups, mid-sized companies, public sector) in their Data Privacy projects: regulatory compliance, governance management, legal security of processing, supplier evaluation, and more.

💼 +5 years of experience – Legal, technical, and operational
🛠️ OneTrust | ISO 27001 | TIA | Contractual Clauses | Register
👥 Collaboration with DPOs, CIOs, Procurement, Legal, Digital/Data teams

🎯 My goal: to save you time, secure your processing activities, and strengthen the trust of your clients and partners.

📩 Open to one-off or long-term assignments – responsive and results-oriented

  • French

    Native or bilingual

  • English

    Fluent

  • German

    Conversational

  • Spanish

    Basic

Can work on-site
Paris (up to 50km)

Experience

  • Engie
    Data Privacy Manager
    LEGAL
    July 2024 - Today (1 year and 11 months)
    Courbevoie, France
    - Creation of a Privacy governance program (benchmark of 5 CAC 40 companies, tools, methods, procedures, Group DPO network)
    - Responsible for the Group's Real Estate Department
    - Training and awareness for support functions (Procurement, Legal, HR, IT, Real Estate)
    - Register of processing activities: Video surveillance, company fleet, catering, facility management, invoicing and taxes, housing management, digital (smart office), etc.
    - Cookies and trackers
    - Support: Privacy by design, DPIA, information notices
    - Tender management: analysis of technical responses, ranking
    - Various presentations in Executive and Steering Committees
    - Management of data breaches and data subject rights requests
  • Devoteam S.A
    Data Privacy Consultant
    September 2022 - July 2024 (1 year and 10 months)
    Levallois-Perret, France
    Updating governance, particularly determining the roles and responsibilities of processing actors (RACI: Procurement, CISO, Business Units, Legal, Digital/Data)
    Creation of materials and facilitation of awareness workshops for processing actors and other employees
    Mapping and updating the register of processing activities (OneTrust)
    Evaluation of service providers and bidders
    Implementation of Privacy by Design. Validation of Security by Design, Security Assurance Plan (including DICT)
    Management of data subject rights requests: collection and qualification of the request, compilation of the response file, sending to the data subject.
    Presentation of "specific" data processing activities in Global committees for Group validation
    Continuous assistance provided to employees for assigned tasks, feedback, and learning key concepts.

    Data Privacy Legal Counsel (including Schrems II)
    Drafting and updating Privacy clauses: generic clause, descriptive annex of the processing, TOMs, Transfer Impact Assessment.
    Negotiation of contractual provisions with service providers according to responsibility schemes (RT/ST)
    Evaluation of service provider maturity levels: minimization, hosting, security measures (confidentiality, integrity, availability)
  • Aviva France
    Data Protection Officer Assistant
    BANKING AND INSURANCE
    September 2020 - September 2022 (2 years)
    Bois-Colombes, France
    Updating information materials for data subjects on the Internet: Terms of Use, Cookies and other trackers, Privacy Policy, Legal Notices. Drafting information notices
    Processing requests from operational departments
    Drafting GDPR policies and procedures: CNIL Control, Data Breach, Privacy by Design
    Responding to data subject rights requests. Mapping and updating the register of processing activities (Excel)
    Preparing training and awareness materials. Legal and regulatory watch (CNIL, CEPD, ICO, APD, French Case Law).

Recommendations

Be the first to recommend Hugo

Help this freelancer shine by sharing your experience working together.

These freelancer profiles also match your criteria

AgathaA

Agatha Frydrych

Backend Java Software Engineer

4.7

(3)

2

BaptisteB

Baptiste Duhen

Fullstack developer

4.6

(4)

5

AmedA

Amed Hamou

Senior Lead Developer

4

(2)

7

AudreyA

Audrey Champion

Web developer

4.3

(3)

4

Signup to reveal

Education

  • Master II in Digital Law
    Paris XII
    Master II Droit du numérique
  • University Diploma in Digital Lawyer and DPO
    Catholic University of Lyon
    Diplôme Universitaire Juriste Digital and DPO
Check out Hugo's education

Skill set

Web Programming
Microsoft Copilot
MySQL
Canva
Schrems II
Data Privacy

Categories