Staff training & awareness
Tailored sessions that turn the GDPR from an abstract regulation into daily reflexes for your teams.
External DPO & Data protection expert
Personal data is your most valuable asset.
Franck Dumortier helps companies and organisations to meet privacy and data security requirements — through advice, audits, coaching and training.
The external DPO service
Committed to expert GDPR advice.
Under the GDPR, a DPO needs expert knowledge of data protection law and practices, and must be independent. An external DPO can be appointed on the basis of a service contract — giving you that expertise and independence without carrying the role in-house.
DPO as a service
Data protection, AI and cybersecurity: be proactive.
Franck delivers data protection advice and hands-on support across the full compliance lifecycle — from the first record of processing to a breach notification at 3 a.m.
Privacy & security policies
Policies your organisation can actually apply, written for the way your teams really work.
Processor & joint-controller agreements
Drafting and reviewing Article 26 and Article 28 contracts, including international transfers.
Records of processing activities
Building and maintaining the Article 30 register that underpins every other compliance obligation.
Data protection impact assessments
Structured DPIAs for high-risk processing, including algorithmic and AI-driven decision systems, with proportionate and documented mitigation measures.
Data subject requests
Procedures and case-by-case handling for access, erasure, objection and portability requests.
Security & breach notification
Incident procedures, 72-hour notification assessments and dealing with supervisory authorities.
Audits & coaching
Independent review of your existing programme, plus ongoing coaching of your internal DPO or team.
Data protection & AI risks
GDPR, AI
and cybersecurity.
Risks
- The GDPR governs how personal data is collected, secured and accounted for.
- The AI Act adds obligations tied to what a system does.
- GDPR and AI Act apply together the moment an algorithm processes personal data.
1,216
personal data breaches notified to the Belgian Data Protection Authority in 2025.
1,394
complaints lodged with the same authority — two thirds more than the year before.
214
decisions handed down by its Litigation Chamber, up by a quarter in a year.
Be accountable
Accountability is the key principle to evidence your legal compliance.
Under the GDPR, accountability requires that organisations put in place appropriate technical and organisational measures — and are able to demonstrate what they did, and how effective it was, whenever they are asked.
That is the work: not producing paperwork for its own sake, but building a record that holds up in front of a supervisory authority, a client, or a court.
Need some information?
Let's talk about your compliance.
Feel free to get in touch by e-mail, phone or LinkedIn.
First conversations are informal and without obligation.
Office
Franck Dumortier Juriste SRL
Rue Docteur Elie Lambotte 155
1030 Brussels, Belgium
VAT BE 0798.950.495
Rue Docteur Elie Lambotte 155
1030 Brussels, Belgium
VAT BE 0798.950.495