Internal DPOs
- Lawyer, IT manager or officer appointed DPO on top of their role
- Need for expert backing on complex topics
- Workload to absorb: DPIAs, records, contracts
Cybersecurity & Governance
GDPR and DPO support
Legal and technical expertise to bring your personal data processing into compliance and back your DPO, whether internal or external. Available in the Paris region, Lyon, Chambéry, Annecy and Geneva, or remotely anywhere in France and French-speaking Switzerland.
The challenge
GDPR is managed over time.
The GDPR requires you to document your processing, frame your processors, answer individuals' requests and handle data breaches. In some cases, it also requires appointing a Data Protection Officer (DPO).
Many DPOs, often appointed internally, do not always have the time or the full range of skills to carry these topics alone. We support them, or support the organisation directly, so that compliance is not a one-off project that quickly becomes outdated.
Who it is for
Organisations that process personal data.
SMEs and mid-caps
- Customer, prospect, employee and candidate data
- Need for an up-to-date record and clear procedures
- Recurring customer questions about compliance
Groups and digital projects
- Subsidiaries to align on a single policy
- New tools, SaaS and AI projects to frame
- Data transfers outside the European Union
Missions
Our GDPR support
01
Records of processing
Mapping of processing activities, keeping the record up to date, compliance documentation.
02
Impact assessments (DPIAs)
Identifying high-risk processing, carrying out DPIAs and tracking the measures.
03
Contracts and processors
Review of processor agreements (DPAs), transfer clauses, supplier assessment.
04
Data subject rights
Procedures to answer access, erasure and objection requests within legal deadlines.
05
Data breaches
Incident qualification and preparation of notifications to the authority and to individuals when required.
06
DPO backing and awareness
Advice on new projects, team training, regular checks and reporting to management.
Method
How the engagement works
Scoping
A first conversation to understand your processing, your organisation and your priorities.
Diagnosis
Mapping of processing activities and gap analysis against the GDPR.
Compliance plan
Prioritised actions: record, privacy notices, contracts, procedures.
Follow-up
Ongoing support for your DPO and teams, with regular reporting.
Why Axiomata
GDPR compliance that also speaks security.
Over eight years of hands-on experience, including DPO and CISO roles in groups of more than 1,000 employees as well as startups, across retail, maritime and defence.
Data protection largely relies on system security. Combining both skills makes DPIAs realistic and produces measures your technical teams can actually apply.
FAQ
GDPR and DPO: your questions
Is a DPO mandatory for my company?
It is for public bodies, and for organisations whose core activities involve regular and systematic monitoring of individuals at large scale, or large-scale processing of sensitive data. In other cases it is recommended. A first conversation helps determine it.
Can you be our appointed DPO?
Our role is to support: we work alongside your internal DPO or the person you appoint, bringing expertise and carrying out the compliance work. We also help you choose and appoint your DPO.
What is the difference between a DPO and a CISO?
The DPO ensures personal data processing complies with the GDPR; the CISO manages information system security. The two overlap heavily, which makes coordinating them valuable.
Do you work remotely?
Yes. Much of the work is done remotely, anywhere in France and French-speaking Switzerland, with occasional on-site visits for workshops, committees or crisis management. We work on site in the Paris region, Lyon, Chambéry, Annecy and Geneva.
Do you support Swiss companies?
Yes. The GDPR applies in particular to Swiss companies offering goods or services to individuals in the European Union, and the Swiss Federal Act on Data Protection (nFADP), in force since September 2023, shares many of its principles.
Related expertise
Go further
Let's talk about your data.
A first conversation to frame your challenges, with no commitment. We work in the Paris region, Lyon, Chambéry, Annecy and Geneva, and remotely anywhere in France and French-speaking Switzerland, with occasional on-site visits.
Talk to an expert