You're seeing this page as if you were . The main menu is still yours, though. Exit from immersion
Mickaël OuvrardMO

Mickaël Ouvrard

GDPR Consultant / GDPR Trainer / DPO

€450/day
3 projects
Paris, FR
3-7 years

Average response time: 1 hour

Freelancer profile translated to English.
Back to original language

About Mickaël

GDPR remains obscure for many SMEs, VSEs, associations, town halls, or other public organizations. All are concerned, but many lack information on the subject, do not have the time, resources, or appropriate tools to deal with it.

However, GDPR, and more generally, personal data protection, is not just a tedious constraint. It can be a lever to establish a relationship of trust between you and your clients, prospects, members, donors, and employees… Its implementation can allow you to increase your security, improve your products or services, increase the consent of those who fill out your online forms, and thereby gain a real competitive advantage. It is therefore an obligation that you can turn into an opportunity for your organization, provided you are supported by someone who takes your constraints into account.

So if you would like help from a consultant on this subject, do not hesitate to contact me! I can help you with the practical implementation of GDPR. Rather than an abstract and paralyzing view of security and its legal framework, I will offer you concrete solutions, adapted to your situation, that will allow you to comply with these legal obligations while serenely continuing your activities. My operational methodology indeed takes into account the specificities of each organization. Depending on your needs, I can therefore participate in your GDPR compliance, whether total or only partial initially; I can also carry out one-off personal data protection missions for you (updating consent requests, your contracts, processing mapping, setting up registers, carrying out DPIAs, etc.). I could also be your DPO, to relieve you of all issues related to personal data protection.
  • English

    Conversational

  • French

    Native or bilingual

Can work on-site
Paris (up to 50km), Poissy (up to 50km), Évreux (up to 30km), Nantes (up to 50km), Angers (up to 50km)

Experience

  • ACED FORMATION
    Malt logoOn Malt
    Training for the DPO role
    CONSULTING AND AUDITS
    September 2025 - October 2025 (1 month)
    Villebon-sur-Yvette, France

    Personalized training for the internal DPO role

    • Individualized training, adapted based on the knowledge, gaps, and expectations of the person being trained, and adjusted according to their company and sector.
    • Practical training, illustrated with instructive examples and case studies, to enable the person to be immediately autonomous and effective in their role as a personal data protection officer within their company.
    • Training content: acquisition of GDPR and personal data protection fundamentals, understanding the DPO role and activities, familiarization with the GDPR compliance process and tools, focus on data security.
    • Provision of training materials: comprehensive training manual, practical document templates for GDPR compliance (processing registers, breach registers, data subject rights request tracking documents, standard contracts, information notice templates, etc.), information/awareness leaflets on personal data protection and cybersecurity, links to reference organizations, etc.
    • Administrative follow-up: training certificate, skills assessment quiz and skills validation certificate, training satisfaction questionnaire provided to the trainee at the end of the training.
    GDPR Training DPO Training Facilitation GDPR Awareness Training and Awareness
  • Cabinet DUCASSE
    Annual External DPO + GDPR compliance finalization
    MEDICAL
    June 2025 - Today (1 year)
    Annecy, France

    GDPR Compliance Finalization

    • Finalization and updating of the processing map and processing register;
    • Drafting of a data protection policy adapted to the company;
    • Drafting of an information system security policy adapted to the company;
    • Monitoring the implementation of the action plan;
    • GDPR compliance assessment and audit.

    DPIA

    I will provide advice and assistance for the DPIA related to conducting confidential individual interviews at the employee's request:
    More specifically, my assistance and advice will concern the following points:
    • Training and advice on DPIA, transmission of necessary concepts for its realization, training on the software used and on managing interviews, etc.
    • Conducting various phases of the DPIA;
    • Assessment of measures ensuring the proportionality and necessity of the processing, proposal of protective measures for the rights of data subjects;
    • Assessment of data security risks (assessment of existing or planned measures, assessment of potential privacy infringements, proposal of corrective actions);
    • Final opinion.

    External DPO

    • Official correspondent with the CNIL;
    • Monitoring compliance with GDPR and internal procedures within the firm;
    • Management of relationships and contracts with prospects and clients regarding personal data protection;
    • GDPR compliance check of subcontractors and partners;
    • Management of data subject rights requests;
    • Management of data breaches;
    • Monitoring of personal data protection legislation and regulations;
    • Annual DPO report.
    Outsourced DPO GDPR Compliance GDPR Audit Subcontractor Management CNIL
  • Cabinet DUCASSE
    Malt logoOn Malt
    GDPR Consultant
    MEDICAL
    March 2025 - April 2025 (1 month)
    Annecy, France

    First level of GDPR compliance

    - GDPR awareness and training;
    - Discussions and advice on data security, cybersecurity, and the implementation of HDS hosting;
    - Discussions and advice on personal data processing (types of data used, processing practices, etc.) + analysis of these elements;
    - GDPR compliance audit (legal audit, organizational audit, technical audit, and website audit) + action plan;
    - Processing mapping + development of the processing register;
    - Provision of tools for compliance (processing registers, breach registers, data subject rights request tracking document, data retention period list, standard contracts with clients and subcontractors, information notices, various procedures, including consent collection, etc.) + presentation and explanation of this documentation;
    - GDPR monitoring of service providers and subcontractors, awareness-raising for subcontractors.
    Cybersecurity GDPR Compliance Training HDS Subcontractor Management

Reviews

5.0

Out of 2 ratings

C

Cedric

ACED FORMATION

Reviewed on 11/19/2025

Very good professional. Very agile, which is not always easy in this field.
NellyN

Nelly

Nelly DUCASSE

Reviewed on 4/16/2025

Mickaël showed adaptability and guided us through each step very professionally. I recommend him without hesitation.

Recommendations

These freelancer profiles also match your criteria

AgathaA

Agatha Frydrych

Backend Java Software Engineer

4.7

(3)

2

BaptisteB

Baptiste Duhen

Fullstack developer

4.6

(4)

5

AmedA

Amed Hamou

Senior Lead Developer

4

(2)

7

AudreyA

Audrey Champion

Web developer

4.3

(3)

4

Education

  • DPO: DPO Skills
    Athéna Formation
    2023
    - Etre capable de mener la mise en conformité RGPD d’une organisation - Acquérir les compétences et les connaissances pour bien remplir la fonction de DPO - Etre capable d’inscrire une organisation dans une démarche d’amélioration continue pour la protection des données personnelles en conformité avec le RGPD.
  • The GDPR Workshop
    CNIL
    2023
    -Le RGPD et ses notions clés -Les principes de la protection des données -Les responsabilités des acteurs -Le DPO et les outils de la conformité -Les collectivités territoriales

Skill set

Categories