Rajaa S.

Managed GDPR compliance within a portfolio of 6 subsidiaries belonging to the Health Business Unit; Supported GDPR Correspondents in the scope through regular follow-up meetings and advice when necessary; Maintained compliance of existing processing by ensuring the review of the Health BU's processing register and DPIAs, and monitoring the implementation of associated action plans; Ensured adherence to the Privacy by Design approach by supporting new projects of the Health BU; Produced DPIAs and associated checklists; Produced reporting to relevant management.

Missions for various clients supporting GDPR compliance implementation; GDPR compliance audits, identification of compliance needs and monitoring of compliance actions, analyses, controls; Managed a network of GDPR referents and collaborated with business teams; Reviewed processing registers; Drafted information notices, privacy policies, and other legal texts; Collaborated with IT teams for the implementation of IT security measures; Negotiated and drafted clauses dedicated to personal data protection; Raised awareness, trained, and advised operational teams; Created and maintained "Accountability" documentation; Participated in platform evolutions; Legal watch and article drafting.