You make sure every AI project complies with the GDPR and the AI Act, and that the client understands what that means for their operations.
What you'll do
- Analyse the processing of personal data in each project: legal basis, minimisation and retention periods.
- Carry out data protection impact assessments when needed.
- Classify the risk of AI solutions under the AI Act and define the resulting obligations: documentation, transparency and human oversight.
- Review AI vendor contracts and terms regarding data processing.
Requirements
- Senior experience in data protection, compliance or digital law.
- In-depth knowledge of the GDPR and knowledge of the AI Act.
- Certifications such as CIPP/E or experience as a DPO are valued.
- Ability to explain legal obligations in plain language to people who run an SME.
- Fluent English. Portuguese is a plus.
How we work
- Projects with SMEs, from diagnostic to implementation.
- Weekly deliveries and measured gains. No reports left in a drawer.
- Remote-first, with in-person meetups in Lisbon.