Jules Gregoire

Personal data compliance for employees and clients,

Development of a personal data breach management policy,

Participation in updating the Information System Security Policy (ISSP),

Drafting the annual report of personal data processing activities for the 2022 fiscal year

Implementation of injunctions and recommendations from the Personal Data Protection Authority of clients of the International Bank for Industry and Commerce (BIIC) of Benin

1. Development and control of processing mapping

As a technical project manager, I participated in the development of processing mapping for local authorities (town halls and prefectures), ministries, banks, and telecommunications networks. I also provided training for executives from various companies in the implementation and follow-up plan for processing mapping.

2. Implementation of the record of processing activities

I assisted public companies and private organizations in establishing and maintaining the record of processing activities carried out in their institutions. In this capacity, as Head of the Control and Litigation Department of the Personal Data Protection Authority of Benin (formerly the National Commission for Information Technology and Liberties) of Benin, I designed a template for the record of personal data processing activities.

3. Development of personal data breach incident management procedures

I participated in the obligation for companies to have a personal data breach incident management policy.

I participated in the review of personal data breach incident management procedures for 76 public companies and private organizations.

I also developed a template for a personal data breach management policy for the Personal Data Protection Authority of Benin.

4. Completion of declarative formalities with the CNIL

I analyzed approximately 500 files for authorization and declaration requests to the Benin Data Protection Authority. I also assisted approximately 150 companies with data processing declaration formalities to the Personal Data Protection Authority (APDP).

5. Conducting Data Protection Impact Assessments

I assisted public companies and private organizations in conducting impact assessments related to the protection of personal data and privacy.

I also participated in the development of the guide for conducting data protection impact assessments.

6. Conducting compliance audits and managing risks related to personal data processing

The various compliance audits I had the pleasure of participating in at certain private and public organizations allowed me to formulate recommendations for managing these non-compliance risks, both in terms of reputation, criminal, civil, or administrative sanctions, and other risks.

7. Implementation of compliance tools

As Head of the Control and Litigation Department, I developed various compliance tools for the Personal Data Protection Authority of Benin (formerly CNIL), which are made available to data controllers to facilitate the obligation of compliance with the national law on personal data protection and GDPR.

8. Training of staff on the challenges of personal data protection

During my tenure, I trained over 5000 people in various sectors such as: telecommunications, banking and microfinance, insurance, administrations, the Order of Architects and Urban Planners, Startups, universities (students and administrative staff), Schools (pupils and administrative staff), Hotels and Supermarkets, etc. on various topics related to the protection of personal data and privacy.

9. Implementation and evaluation of the State's Information System Security Policy (PSSIE)

As Head of the Control and Litigation Department, I trained Data Protection Officers (DPOs), Information System Security Officers, Directors, and managers responsible for the functioning of information systems on the obligation to implement an Information System Security Policy (PSSIE). They were equipped with the definition of an action plan for policy implementation, the establishment of information system security policy rules, risk identification and assessment, and the definition of security requirements, among other things.