Freelancer profile translated to English.
Back to original languageAbout Mathis
I help companies secure their GDPR, AI, and cybersecurity projects without slowing them down.
Most of my clients know they have a GDPR issue... sometimes a cyber issue... but they neither have the time to get bogged down nor the desire to produce theoretical documents. My role is to transform regulatory obligations and security requirements into concrete, useful, and understandable decisions.
I get involved when you launch a new project (digital tool, CRM, client platform, automation, AI) and you want to avoid a blockage, an underestimated risk, or an unpleasant surprise later on – whether it's legal, organizational, or related to information security.
I also support more mature organizations whose processing register is incomplete, whose access or responsibility governance lacks clarity, or who are questioning the actual need to conduct a DPIA, formalize a risk assessment, or structure their security approach.
In concrete terms, I help you identify your real risks, prioritize what is critical, and secure your choices. I conduct pragmatic diagnostics, I structure or overhaul risk governance, and I support projects from conception to integrate data protection and security without hindering innovation.
I also work on projects involving artificial intelligence, in connection with GDPR and the AI Act, to frame applicable obligations and enable teams to innovate without unnecessary exposure.
Are you looking for a point of contact for your compliance and risk governance issues, as well as a designated contact person in case of CNIL control or incident? I can assist you as a certified external DPO.
No unnecessary jargon.
A risk/impact/arbitration logic.
Clear deliverables.
Constant dialogue with business teams, IT, and decision-makers.
French
Native or bilingual
Can work on-site
Paris (up to 50km)
Experience
- AA ELITE AIRPORT
On Malt
Dastra Configuration - GDPR ComplianceTRAVEL AND TOURISMJanuary 2026 - January 2026- Review and configuration of the Dastra space
- Review of processing registers (data controller and sub-contractor)
- Data mapping
- Information notice on your contact form
- Review of your privacy policy
- Provision of a register for data subject rights requests
- ORSYSOutsourced DPOEDUCATION AND E-LEARNINGJanuary 2026 - Today (5 months)Nanterre, France- Designation as DPO to the CNIL- Understanding of the context and review of the previous DPO's work- Compliance support on various projects- Assistance in completing the processing register- Planning of an action plan for the coming year- Drafting of contractual clauses (GDPR + AI)- Subsidiary compliance
- mydariManaging PartnerCONSULTING AND AUDITSJuly 2024 - Today (1 year and 11 months)Paris, Francemydari is a human-sized consulting firm whose main objective is to shape a landscape where compliance becomes a driving force for innovation and growth. We are committed to guiding our clients through the complexities of regulatory compliance, transforming challenges into strategic opportunities. With an innovative and tailor-made approach, our goal is to free our clients from constraints, empower them in the face of ever-evolving regulations, and create an environment where compliance becomes added value, propelling companies towards sustainable and responsible success.
Recommendations
AA
These freelancer profiles also match your criteria
Agatha Frydrych
Backend Java Software Engineer
4.7
(3)
2
Baptiste Duhen
Fullstack developer
4.6
(4)
5
Amed Hamou
Senior Lead Developer
4
(2)
7
Audrey Champion
Web developer
4.3
(3)
4
Education
- Master 2 (M2)Master 2 Algorithmic Law and Data Governance2021Master 2 (M2)
- Master 1 in Business Law, Banking, Finance and Securities LawUniversité Côte d'Azur2020Master 1 en droit des affaires, Droit bancaire, des affaires, de la finance et des valeurs mobilières
Certifications
- ISO27001 LIPECB2022