Freelancer profile translated to English.

Description

Hello,

A lawyer specializing in digital law with over 15 years of experience in the digital sector, I currently work as an independent consultant specializing in personal data protection.

Holding the DPO certification issued by Bureau Veritas and trained in the DPO profession, I mainly support private organizations in their operational and organizational compliance efforts with regulations applicable to personal data protection.

UPDATED: 02/25/2026 - Ongoing missions:

- DPO group assistance (Deputy DPO) - 15 days/month (Energy sector - For 36 months):

*GDPR:

-> Management and processing of GDPR assistance and advice requests (Management of the dpo mailbox)

-> Support for Project Managers on the GDPR aspect of all projects

-> Management and execution of DPIAs (12)

-> Drafting of LIA (Legitimate Interests Assessment) for numerous processing activities

-> Drafting of SCCs (Standard Contractual Clauses) if necessary for the framework of data transfers outside the EU

-> Management and monitoring of data subject rights requests

-> Management of GDPR compliance for contracts

-> Management, analysis, and, if applicable, notification of personal data breaches

-> Management and monitoring of website compliance / GDPR and cookies (53)

-> Management, monitoring, and updating of compliance documentation (Group instruction memo, processing registers (75), breach register, data subject rights request register, internal and external personal data protection policies, cookie policy, standard ST clauses, GDPR procedures, and annual reporting)

-> Facilitation of the network of GDPR correspondents across departments/subsidiaries and GDPR steering committees

-> Management of the GDPR section of the company intranet, newsletters, and monitoring.

-> Various GDPR awareness actions and training for GDPR correspondents

-> Next availability: September 2026

Rani ZAIDI

contact(@)neo-dpo.fr

Industry field of expertise

Languages

English
Fluent
French
Native or bilingual

Workplace preferences

Can work on-site

Paris (up to 50km), Paris (up to 100km), Strasbourg (up to 100km)

NEO DPO - www.neo-dpo.fr
Independent Personal Data Protection Consultant - External DPO
CONSULTING AND AUDITS
July 2019 - Today (6 years and 11 months)
- Global GDPR compliance audit
- Consulting and operational support for GDPR compliance
- Drafting of policies, procedures, and organizational process modeling related to personal data protection
- Handling of DPO (external) missions - Two ongoing missions
- Website audit and compliance
- Audit of a partner acting as a data processor
- Support and assistance for the internal DPO
- Prevention and assistance in case of CNIL control - two CNIL controls closed without sanctions
- Training and awareness on the issues and rules applicable to personal data protection
- Support for the implementation of a GDPR compliance governance software solution
ALTER PRIVACY SOLUTIONS
GDPR Consultant
CONSULTING AND AUDITS
November 2018 - July 2019 (8 months)
Paris, France
Mission: Consulting and support for a group specializing in recruitment and HR services on its operational and organizational measures for compliance with personal data protection regulations.

• Support and advice to the group DPO in carrying out their missions
• Conducting a GDPR compliance diagnosis and a plan of prioritized actions to be implemented
• Website compliance (Updating information notices, privacy policy, and legal notices)
• Drafting of compliance documents: data protection policy, authorization management policy, rights management procedure, IT administrators charter, CNIL control procedure, and practical guide on data retention and archiving
• Validation of clauses relating to the subcontracting of personal data processing
• Inventory of processing activities, creation, and updating of processing registers
• Awareness of a project manager on conducting a data protection impact assessment
• Assessment of data security level in collaboration with the IT administrator and the CRM development manager
• Audit and compliance of the video surveillance system at the head office premises
• Drafting of legal memos (consent in HR matters, strategy for implementing processing registers within a group of companies, contributions of the ordinance of December 12, 2018, rewriting the new Data Protection Act, commercial prospecting by electronic means, AFNOR GDPR certification, social media charter, free comment sections)
• Management of legal watch regarding personal data protection
JEMS DATA FACTORY
GDPR Consultant
CONSULTING AND AUDITS
September 2018 - October 2018 (2 months)
Neuilly-sur-Seine, France
• Consulting and support for a professional training organization in its compliance efforts with regulations applicable to personal data protection
• Conducting a compliance audit and developing an action plan to be implemented