All services / Privacy & GDPR
Privacy and GDPR
Eight years into the GDPR, the hard part is no longer knowing the rules. It is making them work inside products, vendor stacks and growth plans. I give privacy advice that engineering and marketing teams can act on, and I can run the function on an interim basis.
GDPRUAVGePrivacy / TelecommunicatiewetEDPB guidelinesData Act
What I help with
- Privacy programme design and gap assessments
- DPIAs, including for AI features, profiling and tracking technologies
- Records of processing, lawful basis analysis and retention schedules
- International data transfers: SCCs, transfer impact assessments, the EU-US framework
- Processor and joint-controller agreements, and vendor privacy due diligence
- Cookies, consent and marketing compliance under the ePrivacy rules and Dutch Telecommunicatiewet
- Data subject requests, complaints and breach response under 72-hour timelines
- Interim privacy officer or DPO support, and audits before certification
Typical engagements
- DPIA for a new product or AI feature (fixed fee)
- Interim privacy counsel during a hiring gap or a large programme
- Transfer impact assessments across a vendor portfolio
- Privacy-by-design sessions with product and engineering teams
Who this is for
Technology companies, marketplaces, SaaS vendors, HR and health tech, and organisations processing data at scale across EU markets.
Frequently asked
Can you act as our DPO?
I can provide interim DPO or privacy officer support. Whether a formal DPO designation is mandatory depends on your core activities; I assess that first.
Do you handle Dutch supervisory authority matters?
Yes, including responding to Autoriteit Persoonsgegevens requests and preparing for investigations, in Dutch or English.
How quickly can you turn around a DPIA?
A focused DPIA for a single feature typically takes two to three weeks, depending on how quickly your team can answer technical questions.
Have a regulatory question?
Send a short description of the matter. I reply within one working day, usually with a view on scope and a fixed fee where possible.