When to bring me in
Personal information moves through several systems, a supplier requests access or a privacy question blocks operations. Perhaps there has been an incident and it is important to establish quickly what actually happened. I help bring structure to the situation.
Start with the flow of data
Where is data stored? Who can access it? Why is it processed, and which parties are involved? Working through these questions technically and organisationally creates a useful picture of risks and responsibilities.
Policy that works in practice
Supplier agreements, access management, internal procedures and day-to-day practice need to support each other. I help turn requirements into practical measures, taking the international context into account where data or services cross borders.
Clarity during incidents and investigations
A data breach or investigation calls for an accurate picture of the facts. I connect IT, management and the relevant privacy or legal specialists, so information is documented and the necessary decisions reach the right people.