Alicja Wilczek-Lawyer • External Data Protection Officer • IT Security Officer
Check rate
Experience
Integrated security and emergency documentation for a 24/7 logistics company
Medium-sized logistics company
- Creation of complete bilingual (DE/EN) security and emergency documentation: Business Continuity Plan / Disaster Recovery Plan, Incident Response Plan v2.0 with four case-specific playbooks (PICERL), access control policy, vulnerability management policy, business resilience programme, risk governance plan
- Consolidation into an integrated emergency handbook (12 chapters) with immediate checklists for six emergency scenarios, a prioritized action table, and a formal approval structure
- Review of a penetration test report (Greenbone) with complete remediation of all findings and formal risk acceptance of a residual risk with documented compensating control
- Review and documentation of NIS2 and HinSchG applicability, including the legal reasoning for non-applicability
Lawyer – IT Law and Data Protection
KONTENTIERT LEGAL
- Litigation and representation in extensive court proceedings in IT and data protection law before German courts – from out-of-court negotiations through trial proceedings to appellate proceedings
- Legal representation of companies in data protection and IT law disputes: fine proceedings, correspondence with supervisory authorities (focus on LDI NRW and LDA Bavaria), defense against damage compensation and injunctive relief claims by data subjects
- Contract drafting and review in an IT context: data processing agreements, IT service agreements, SaaS and cloud agreements, international data transfers (SCC, TIA), data protection impact assessments
- Advice on regulatory changes: NIS2 implementation, DORA, Whistleblower Protection Act, AI Act, TDDDG – including client briefings and compliance roadmaps
- Main client segment: mid-sized companies, IT service providers, e-commerce companies, logistics, manufacturing, retail, and healthcare
Founder & Owner – Compliance Consulting for Data Protection, IT Security, E-Commerce
EASY DATENSCHUTZ
- Building and running my own compliance consultancy for more than four years with full entrepreneurial responsibility – client acquisition, service delivery, quality assurance, pricing, and office administration
- Taking over the DPO function under Art. 37 GDPR for more than 200 clients across sectors: IT service providers, e-commerce, industry, construction, logistics, retail, healthcare, coaching providers, brokers, and other service providers – from mid-sized companies with 24/7 operational requirements to internationally structured organizations
- Cross-border compliance support for clients in Germany, Poland, Italy, and Great Britain: parallel application of GDPR, UK GDPR, national data protection law, and sector-specific requirements; correspondence with supervisory authorities such as LDI NRW, UODO, Garante, and ICO
- Building and operating information security management systems: security policies, access control, vulnerability management, business continuity and disaster recovery, incident response with case-specific playbooks
- Lead responsibility for more than 300 data protection and IT security projects: records of processing activities, data protection impact assessments, audit reports, security documentation, emergency handbooks, employee training, as well as ongoing strategic and operational advice
- Crisis management for data breaches and cyber incidents: coordination of internal stakeholders, IT service providers, forensic providers, and supervisory authorities – including timely notifications under Art. 33 GDPR within 72 hours
- Analysis of penetration test results (including Greenbone), derivation of risk-based remediation plans, and formal risk acceptance procedures in line with ISO 27005 / BSI standards
Judicial and administrative preparatory service – Second State Exam
Landgericht Wuppertal
- Civil law placement at the Velbert Local Court: independent drafting of judgments, court hearings, and performing judicial duties under supervision (assignment in judicial office)
- Criminal law placement at the Wuppertal Public Prosecutor's Office in the department for drug-related crime, organized crime, and cyber crime: bringing charges, case processing, court representation
- Administrative law placement in the administration of the NRW state parliament with a focus on data protection and compliance – public authority perspective on regulatory processes
- Legal placement in a Düsseldorf business law firm with a focus on data protection law and compliance
- Result: sound knowledge of the German judiciary and administrative practice from the inside – valuable in any later dispute with courts and supervisory authorities
Student Assistant
Marco Schmitz MdL · Landtag NRW
- Support in day-to-day political work, research on legislative procedures, meeting preparation, and constituency work
- Insight into regulatory processes and the institutional framework of law-making in North Rhine-Westphalia
Research Associate
Boden Rechtsanwälte
- Handling legal cases in industrial property law, data protection law, and IT law
- Research, draft pleadings, client communication, and case management alongside my studies and legal traineeship
Crisis support after data breaches and cyber incidents
Various assignments across industries
- Initial assessment within two hours, decision on reporting under Art. 33 GDPR, communication with authorities, and notification of affected persons under Art. 34 GDPR
- Managing immediate response measures: securing evidence, containment, forensic analysis, and restoration – with clear division of roles between management, IT, data protection, and external service providers
- Auditable documentation of all decisions and communication steps as protection in any later proceedings before authorities or courts
Data protection compliance for e-commerce mandates
Several online retailers on the German market
- Ongoing DPO support and legal advice on updates in consumer protection, data protection, and e-commerce law
- Preparing client information on regulatory changes (including implementation of EU directives in the German Civil Code, Price Indication Ordinance, EmpCo Directive)
- Reviewing and drafting privacy policies, terms and conditions, data processing agreements, and cookie consent concepts
Industry Experience
See where this freelancer has spent most of their professional time.
Experienced in Professional Services, Government and Administration, Information Technology, Retail, Transportation, and Healthcare.
Business Area Experience
See which departments and functions this freelancer has contributed to most.
Experienced in Information Technology, Legal, Operations, and Research and Development.
Summary
Lawyer specializing in data protection and IT law, certified external data protection officer, data protection auditor, and IT security officer. Combines in one person what the market usually covers with three separate service providers: legal expert advice, operational compliance responsibility, and technical-organizational security management.
Self-employed since 2022 with my own compliance consultancy focused on data protection, IT security, and e-commerce – working across sectors for service providers, brokers, industry, construction, logistics, retail, healthcare, coaching providers, and IT companies. Cross-border mandates in Germany, Poland, Italy, and Great Britain; bilingual working style (German/English, native Polish).
More than 8 years of specialized professional experience, more than 200 clients supported, and over 300 completed projects. I know the German legal and business environment from both sides: from the courts and public administration – with training placements at the Wuppertal Public Prosecutor's Office (cyber crime, drug-related crime, organized crime), at the Velbert Local Court in civil law, and in the data protection and compliance department of the NRW state parliament – as well as from litigation practice as a lawyer, including representation in extensive court proceedings in IT and data protection law before German courts.
I stand for fast, focused assumption of responsibility: immediate ability to act in crisis and vacancy situations, clear leadership of interdisciplinary teams, and confident coordination of management, IT, supervisory authorities, and external service providers – with the aim of auditable, documented results and measurable impact.
Skills
Data Protection Law
Gdpr · Bdsg · Tdddg
Data Processing Agreements
International Data Transfers
Correspondence With The Ldi Authorities
Representation In Fine Proceedings
It Security & Governance
Iso 27001 · Bsi It Baseline Protection
Isms Setup And Operation
Vulnerability Management
Bcp / Drp / Irp
Penetration Test Analysis
Crisis & Incident Response
Art. 33 / 34 Gdpr Notifications
Picerl Phase Model
Ransomware Response
Forensics Coordination
Crisis Communication
Additional Regulatory Expertise
Nis2 Directive · Dora · Hinschg · Kritis · Tdddg · Ai Act · Employee Data Protection · Video Surveillance · Health Data Protection
Languages
Education
Heinrich Heine University Düsseldorf
First State Examination in Law · Law · Düsseldorf, Germany
Certifications & licenses
Certification under Art. 37 GDPR
Statistics
Experience
Global Experience
Expertise
Qualifications
Profile
Frequently asked questions
Have questions? Find more information here.
Daily Rate Distribution
The rates shown represent the typical market range for freelancers in this position based on recent contracts on our platform.
Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
Average rates for similar positions
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
Similar Freelancers
Discover other experts with similar qualifications and experience
Federico Leefhelm
Henry Hanau
Björn Bausch
Alexander Sänn
Najat Diamante
Markus Willems
Nikolaus Betzler
Christian Decker
Maxim Ribakowski
Alwin Freelancer
Experts recently working on similar projects
Freelancers with hands-on experience in comparable project as a Integrated security and emergency documentation for a 24/7 logistics company
Pierre Gronau
Stephan Selnerat
Peter Dittkuhn
Christian Gebhardt
Volker Jung
Enrique Gallardo
Sandra Klinkenberg
Frank Joraschkewitz
Lucas Löcken
Mike Barthel
Nearby freelancers
Professionals working in or nearby Düsseldorf, Germany
Peter Sachs-Witzel
Felix Bauchspiess
Dirk Volkmann
Rudolf Eggelbusch
Matthias Bullmahn
Antje Baumann
Nicole Appleby
Fadi Shoaa
Frank Cappel
Orhan Yazar
Most recent projects
FRATCH works with many companies and recruitment agencies. Here you will find our recently posted projects and opportunities.
