Lecturio Weiterbildung & Trainings

General Counsel

• Operational implementation of data protection and IT compliance processes at the intersection of the GDPR, the AI Act and US higher-education requirements such as HECVAT and SOC 2
• Respond to security and privacy questionnaires, e.g., HECVAT, VPAT/WCAG and security questionnaires
• Conduct technical discussions with IT security leads from universities and hospitals
• Build a centralized Trust & Compliance knowledge base including a process for keeping it up to date
• Maintain records and registers, including records of processing activities (VVT/ROPA), subprocessors, certificates, deletion policy, technical and organizational measures (TOMs) and incidents
• Operationally manage data subject requests
• Triage new IT and AI tools coming from business units
• Build a central contract register and manage standard and bespoke agreements, DPA versions and deviation analyses
• Keep DPA annexes technically up to date
• Establish scalable processes and leverage AI and automation tools for document comparisons and drafting
• Work closely with the Data Protection Officer (DPO), CTO and CPO

Legal Counsel – Compliance