Joost De Kam, Llm Fip Cissp Cipp/E Cism Cipm Email & Phone Number

Amersfoort, Utrecht, Nederland

No-nonsense privacy guidance that adds value to your organization. Expertly performs any privacy compliance activity you wish to outsource. Visit externaldpo.com for an overview of our services, and our Privacy Toolbox which contains free guidance, formats and examples you can use to independently manage privacy compliance.

Utrecht, Netherlands

SURF is the cooperation that represents the Dutch educational sector. At SURF, Joost’s primary responsibility was managing three extensive Data Protection Impact Assessment projects regarding large IT suppliers. Additionally, Joost helped setting up SURF’s Vendor Compliance service.

Netherlands

At LeasePlan, Joost was responsible for privacy risk management within a large IT transformation program, to ensure secure and privacy compliant program delivery. As a privacy officer he identified and assessed privacy risks, communicated these to senior management, and monitored privacy risk mitigation efforts. Additionally, he (a.o) provided privacy training, negotiated data processing agreements, implemented data retention requirements, assessed data transfers outside the EEA, and responded to internal and external (SOCII) audits. As a result, the UK and NL LeasePlan entities onboarded to the new digital architecture with privacy risks within risk appetite.

Utrecht En Omgeving, Nederland

Multiple engagements within the pharma and public sector fulfilling roles such as data privacy manager and senior privacy officer - see below for more details. Additionally Joost regularly facilitates data privacy trainings within Capgemini, among others to prepare participants for the Cipp/e and CIPM exam. Joost also publishes a quarterly newsletter, informing hundreds of data privacy colleagues on important data privacy developments.

Utrecht En Omgeving, Nederland

National and international engagements within the manufacturing and retail sector focusing on data privacy compliance - see below for more details. Additionally Joost regularly facilitates data privacy trainings within Capgemini, among others to prepare participants for the Cipp/e and CIPM exam.

At ASML Joost was responsible for performing information security assessments on ASML’s most critical R&D applications, and thereafter reporting results and recommendations to senior management.

At Bayer Joost was responsible for Capgemini's data privacy compliance as a supplier within a large (1.5b) and complex program to transform Bayer's IT landscape. As data privacy manager he was the program’s single point of contact for data privacy. Among others, Joost established the privacy control framework in preparation for a SOCII audit, guided internal data privacy audits, provided awareness sessions, audited suppliers, and guided the further implementation of ISO270xx standards.

At the Dutch Public Prosecutor’s Office, Joost further improved the data privacy compliance and security of client's most important IT systems. Within various cross-functional scrum teams he helped developers translate legal requirements into technological solutions, monitored progress, and reported results to key stakeholders.

As a senior privacy officer at the Municipality of Amsterdam Joost was responsible for data privacy compliance within the department ‘Interne Dienstverlening’ (approx. 4.000 employees). He performed or coordinated all activities required for managing data privacy compliance. Among others Joost handled personal data breaches and communicated with Supervisory Authorities and data subjects, monitored compliance with data privacy policies and procedures, handled data subject right requests, performed and facilitated cross-departmental data protection impact assessments, reported risks to senior management, and monitored fulfilment of risk mitigating actions.

Joost’s project team’s responsibility was to guide four European Acuity Brands daughter companies towards GDPR compliance. Among others Joost designed and implemented the following: data privacy governance structure, vendor risk management procedure, data breach handling procedure. After handover of the project the four European Acuity Brands daughter companies were capable of independently managing data privacy compliance.

In coordination with Hunkemöller Joost designed and implemented (among others) the following documentation: data subject rights request handling procedure, data protection governance framework, data security & privacy by design requirements.

International project with multinational team orchestrated from Munich. In this project Joost performed an as-is analysis regarding the state of compliance (GDPR) in all European BMW entities. He also created non-compliance improvement plans for these entities and developed a uniform procedure for handling data subject right requests.

Waalwijk

At Aorta Business Intelligence Joost developed a roadmap by which client can determine what its data privacy obligations are for its personal data processing activities. Additionally, he worked on a project at a client of Aorta regarding big data and privacy protection.

Den Bosch

Analyzing legal cases, editing the plan of approach and preparation of judicial documents.

Mapped the business processes and assessed if Stalman & Rijken was in compliance with sector specific legislation.

Master Of Laws - Llm, Master, Civiel Recht

Thesis about the practical implications of the General Data Protection Regulation (GDPR) for companies. Courses in masters programme.

Bedrijfskunde - Extracurriculair

Ancillary to the full-time law curriculum Joost completed 6 business administration courses, including: organisation design, strategy.

Bachelor, Nederlands Recht

Vwo, Economie & Maatschappij