GDPR compliance

Who is it for?

Companies, associations and local authorities that have never reviewed their GDPR compliance, or did so a long time ago, and want to know where their data stands now that their teams use AI.

How does it work?

Two options to choose from:

• The assessment (steps 1 to 3): you know where you stand and what remains to be done.
• Full support (steps 1 to 5): the assessment, then the implementation, with me.

You can also start with the assessment and move on to full support afterwards.

The assessment

1. A 20-minute call to understand your situation. It is free and there is no obligation.
2. Together, we list the data you use (customers, prospects, employees) and the tools that process it.
3. I compare your practices with what the GDPR requires: records, informing individuals, retention periods, contracts with your service providers, security. Points that require legal advice are listed for your lawyer.

With full support, in addition

4. We put the basics in place: the record of processing activities, the privacy notices, the retention periods, and the procedure to follow in the event of a data breach.
5. We deal with what AI adds: input rules for your teams, and checking a tool before adopting it (contract, hosting, use of your data to train the tool).

To train your teams on the rules for data, I also offer courses: Getting started with AI at work for everyone, and Governing AI in your company for executives.

What do you get?

With the assessment:

• the list of the data you process, and of the tools that process it;
• the gaps with what the GDPR requires, in order of priority;
• the list of points to submit to a lawyer.

With full support, in addition:

• your record of processing activities;
• template privacy notices for your customers and your employees;
• the procedure to follow in the event of a data breach;
• the input rules for AI tools, and a checklist to assess a tool before adopting it.

Duration, location and price

• Duration: depends on the size of the company and the amount of data processed.
• Location: on your premises in Guadeloupe; depending on the project, in Martinique, French Guiana, Saint Martin and Saint Barthélemy. Elsewhere, online by video conference.
• Price: from €650 excl. VAT (one day), depending on the size of the company and the option chosen.

GDPR and the AI Act at the same time?

The two overlap: the same tools, the same data, often the same people. I can handle them together: a single assessment, a single action plan, and an AI use policy that includes the rules on data. The interviews and the inventory only happen once. See also EU AI Act compliance.