Marie-José Promeneur

I support organizations deploying data, SaaS, cloud, or AI solutions in structuring operational, manageable, and demonstrable GDPR and AI Act compliance.

I work in complex environments integrating API flows, subcontractors, SaaS tools, AI systems, or sensitive data, particularly in the healthcare sector.

My role: transform legal requirements into systems directly integrable with business processes and digital architectures.

My interventions cover three levels:

1. GDPR Compliance

• Audit and prioritized action plan

• Records of Processing Activities and responsibility mapping

• DPIA and risk analyses

• Procedures: rights, breaches, retention, and subcontracting

2. Data & AI Governance

• Mapping of API, SaaS, cloud, and AI flows

• Qualification of DPO / ST roles

• Audit of suppliers and subcontractors

• Qualification of systems regarding the AI Act

• AI Register, human oversight, and decision traceability

3. Management & Outsourced DPO

• Privacy by design in projects

• Structuring compliance workflows

• Monitoring action plans and evidence

• Team awareness

• Support for DPO and compliance functions

My approach connects law, governance, and the actual functioning of systems: access, interfaces, suppliers, automated decisions, logging, and retention.

The goal is not only to produce documents but to build compliance that is usable by business units, verifiable in systems, and demonstrable in case of control, audit, or incident.

Deliverables: GDPR / AI Act audit, ROPA, AI Register, DPIA, flow mapping, responsibility matrix, procedures, and prioritized compliance plan.

Over 20 years of experience in regulated environments, particularly in banking, risk management, and compliance.

📩 GDPR, data, or AI project: let's discuss your needs.