You will get me as your Data Protection Officer
Project details
I and the company sign a contract and after that, I fulfill the role of Data Protection Officer for the company for 30 days.
Cybersecurity Expertise
Data Protection, Audit, PrivacyCybersecurity Regulation
GDPRWhat's included
| Service Tiers |
Starter
$100
|
Standard
$200
|
Advanced
$500
|
|---|---|---|---|
| Delivery Time | 30 days | 30 days | 30 days |
Small Company Size | - | - | |
Medium Company Size | - | - | |
Large Company Size | - | - |
72 reviews
(62)
(8)
(2)
(0)
(0)
CS
Christoph S.
May 9, 2025
werden weiter zusammenarbeiten
MG
Mathilde G.
Jun 11, 2026
Freelance Legal & Admin Support — Company Setup (UG) & VAT (Germany)
ME
Mohamed E.
Jun 11, 2026
30 minute consultation
Stephan was excellent to work with. He walked me through my options clearly. What stood out most was his honesty, he gave me a straight, realistic assessment rather than just telling me what I wanted to hear. Highly recommend.
MG
Mathilde G.
May 5, 2026
Freelance Legal & Admin Support — Company Setup (UG) & VAT (Germany)
RL
Roderick L.
Apr 10, 2026
Legal Review of German Cease and Desist Letter
Provided excellent legal review of a German document.
CF
Christina F.
Mar 17, 2026
Arbeitsrechtliche Beratung Freelancer
About Stephan
External DPO | German Lawyer | GDPR, AI Act & EU Compliance Consultant
100%
Job Success
Braunschweig, Germany - 12:15 am local time
I am a **German-qualified lawyer (First and Second German State Examination in Law)**, a **certified Data Protection Officer (TÜV)** and **certified Compliance Officer (TÜV)** with extensive experience advising international businesses on European regulatory requirements.
I currently serve as **External Data Protection Officer and Compliance Officer for a German technology company**, while also advising international clients across SaaS, AI, HealthTech, education, e-commerce and digital services.
Unlike many consultants who focus purely on legal theory, I work directly with founders, executives and operational teams to build compliance programs that are practical, commercially viable and support business growth.
Over the course of my career I have advised companies and entrepreneurs from **more than 40 countries** across Europe, North America, Asia, Australia and the Middle East, helping them establish legally compliant operations in Germany and throughout the European Union.
## What makes me different
Many businesses don't simply need a GDPR consultant.
They need one trusted advisor who understands how legal, privacy, compliance and commercial realities fit together.
My clients work with me because I combine:
• German legal education
• Practical experience as a former attorney
• Active work as External DPO and Compliance Officer
• International business experience
• Business-oriented advice instead of purely academic legal analysis
• Clear communication in English and German
I don't just draft documents.
I help companies implement workable compliance structures that support sales, enterprise procurement, fundraising and long-term growth.
---
# Core Services
## External Data Protection Officer (DPO)
Ongoing privacy governance
GDPR compliance monitoring
Management reporting
Internal policies
Employee awareness
Vendor assessments
Regulatory guidance
Incident response support
Privacy governance frameworks
---
## GDPR & Privacy Compliance
GDPR implementation
Privacy assessments
Data Processing Agreements (DPAs)
Privacy Policies
Cookie compliance
Records of Processing Activities (RoPA)
Data Protection Impact Assessments (DPIAs)
Legitimate Interest Assessments (LIAs)
Transfer Impact Assessments (TIAs)
International data transfers
Data subject request procedures (DSAR)
Data breach procedures
Vendor due diligence
---
## AI Act & AI Governance
AI Act readiness assessments
AI governance frameworks
Risk assessments
AI documentation
Transparency obligations
Internal AI policies
Vendor assessments
AI procurement reviews
Governance structures
Ideal for:
• AI Startups
• Generative AI
• SaaS Platforms
• Healthcare AI
• Education Technology
• Customer Support Automation
---
## Compliance & Corporate Governance
Compliance frameworks
Internal policies
Governance documentation
Risk management
Compliance audits
Regulatory implementation
Operational compliance
---
## Commercial & Corporate Law
GmbH and UG formation
Commercial contracts
Service agreements
Terms & Conditions
Shareholder agreements
Market entry into Germany and the EU
Cross-border business structures
---
## Healthcare & HealthTech
Special category data
GDPR Article 9 compliance
Health data governance
Privacy documentation
Consent management
Compliance reviews
---
## Industries
Artificial Intelligence
Software & SaaS
HealthTech
Education
E-commerce
Marketing Agencies
Cloud Services
Digital Platforms
Professional Services
International Startups
SMEs
Scale-ups
---
# Why Clients Hire Me
✔ German-qualified lawyer
✔ Certified External Data Protection Officer (TÜV)
✔ Certified Compliance Officer (TÜV)
✔ Active DPO for a German technology company
✔ Experience advising clients from 40+ countries
✔ Hundreds of legal and compliance documents drafted
✔ Practical implementation instead of theoretical advice
✔ Strong commercial understanding
✔ Cost-efficient alternative to large law firms
✔ Long-term strategic partner for Germany and EU market entry
Whether you need a long-term External DPO, GDPR implementation, AI Act readiness, compliance documentation, corporate governance or legal support for entering the European market, I provide practical, business-focused solutions that help companies grow with confidence.
If you are looking for a legal and compliance partner rather than someone who simply drafts documents, I'd be happy to discuss how I can support your business.
Steps for completing your project
After purchasing the project, send requirements so Stephan can start the project.
Delivery time starts when Stephan receives requirements from you.
Stephan works on your project following the steps below.
Revisions may occur after the delivery date.
The client purchases the project and we sign a contract.
I act as a data protection officer for 30 days.