28.08.2025 aktualisiert
100 % verfügbar
Legal Counsel Data Protection, AI Act, Data Act, Cyber Law
München, Deutschland
Nur Remote
2. Staatsexamen RechtsanwaltSkills
Künstliche IntelligenzHandelsrechtZivilrechtInformationssicherheitVertragsauslegungVertragsmanagementInternetrechtDatenschutzrechtDatenschutzDSGVO
Datenschutz, Informationssicherheit, Digitale Rechtsthemen, IT-Law
GDPR, AI Act, Data Act, Cyber Resilience Act, NIS-2
Hohe Zuverlässigkeit, Lösungsorientierung, Pragmatismus, Kommunikationstalent
Excel, PowerPoint, Word
GDPR, AI Act, Data Act, Cyber Resilience Act, NIS-2
Hohe Zuverlässigkeit, Lösungsorientierung, Pragmatismus, Kommunikationstalent
Excel, PowerPoint, Word
Erfahrung
Berufserfahrung5 - 10 Jahre
Freelancer seit2020
Sprachen
DeutschMutterspracheEnglischverhandlungssicher
Projekthistorie
- At my client, I served as a Governance Manager responsible for the legal assessment of AI tools and the processing of social data, and I established a company-wide framework for the responsible use of AI.
- This included developing and implementing policies, standards, and processes; verifying legal compliance (e.g., GDPR, preparatory alignment with the EU AI Act, and relevant provisions of the German Social Code, SGB); conducting regular risk assessments and audits; and maintaining continuous compliance monitoring.
- I coordinated cross-functional collaboration among business units, data protection, and information security; designed trainings and awareness initiatives; and advised executives and project teams on ethical, legal, and technical questions related to AI systems.
- Conducted comprehensive data protection audits to ensure GDPR compliance across all businesses.
- Created and maintained the Records of Processing Activities (RoPA) in accordance with Art. 30 GDPR.
- Evaluated cloud providers for GDPR compliance, focusing on their technical and organizational measures (TOMs) and contractual obligations.
- Negotiated and amended Data Processing Agreements (DPAs) with cloud providers, including the incorporation of Standard Contractual Clauses (SCCs).
- Performed Transfer Impact Assessments (TIAs) for cloud services outside the EU to guarantee an adequate level of data protection.
- Conducted Data Protection Impact Assessments (DPIAs) for high-risk projects, especially involving AI applications and data-intensive processes.
- Reviewed and ensured the legally compliant implementation of AI applications, including the creation of guidelines for usage and assessments of algorithmic transparency, fairness, and non-discrimination.
- Performed in-depth data protection audits and devised actionable plans to optimize compliance with GDPR.
- Negotiated and finalized works council agreements for the deployment of new technologies and data processing operations, including cloud solutions and AI applications.
- Designed and delivered employee training sessions focusing on GDPR compliance and the proper use of cloud technologies and AI systems.
- Provided data protection consultancy for projects such as filming, competitions, and internal staff newsletters, including obtaining proper consents and safeguarding data subject rights.