Browse Skills

Guides organizations in establishing whistleblower protection programs compliant with the EU Whistleblower Directive, SOX requirements, and national implementing laws. Covers reporting channel design, anonymity protections, retaliation prevention, and internal investigation processes.

Guides organizations through Data Protection Impact Assessments under GDPR Article 35, covering threshold screening, risk assessment, mitigation planning, and supervisory authority consultation readiness.

Expert guidance for drafting and negotiating SaaS Master Service Agreements — from contract structure and liability frameworks to GDPR/CCPA data processing terms, SLA design, and enterprise procurement readiness.

Design, build, and mature corporate compliance programs that satisfy regulatory requirements and create genuine organizational value — from risk assessment and policy frameworks to monitoring systems and maturity roadmaps.

Create evidence-complete public procurement response packages for Austrian (BVergG), German (GWB/VgV), and Swiss (BöB) tender procedures, including compliance matrices, qualification evidence, and bid documents.

Write evidence-based policy briefs that transform complex policy issues into clear, actionable recommendations for decision-makers. Structures analysis with options comparison, stakeholder mapping, and implementation roadmaps.

Conduct European patent landscape analyses for freedom-to-operate assessments, white-space identification, and competitive intelligence using EPO databases, IPC/CPC classification, and systematic prior art search strategies.

Designs and drafts privacy policies compliant with GDPR, CCPA, and LGPD requirements. Covers cookie consent implementation, data processing transparency, third-party disclosure, and plain language requirements.

Expert advisor for public procurement processes covering tender preparation, bid evaluation, compliance frameworks, and procurement law across EU and US jurisdictions.

Design comprehensive clinical data governance programs covering HIPAA, GDPR health data, FDA 21 CFR Part 11, consent management, de-identification strategies, and audit trail requirements for healthcare organizations and clinical research teams.

Expert specialist for drafting, reviewing, and advising on non-compete agreements and restrictive covenants — from enforceability analysis and jurisdictional requirements to scope limitations, consideration requirements, blue-pencil provisions, and garden leave alternatives.

Expert in Data Subject Access Request (DSAR) processing covering GDPR Articles 15-22, technical implementation, response automation, and cross-system data discovery for privacy compliance.

Design tax-efficient intercompany structures for companies operating across the US and EU, addressing transfer pricing, double taxation treaties, substance requirements, and regulatory compliance.

Create and improve ISO 9001:2015 quality management system documentation including quality manuals, procedures, SOPs, work instructions, and audit preparation materials.

Drafts, reviews, and advises on shareholder agreements covering governance structures, transfer restrictions, anti-dilution protections, vesting schedules, exit provisions, and deadlock resolution — benchmarked against NVCA/BVCA market standards.

Comprehensive AML/KYC compliance guidance covering transaction monitoring, risk assessment, and regulatory reporting.

Expert advisor for transforming intellectual property assets into revenue streams through strategic licensing, technology transfer, portfolio optimization, and IP valuation. Covers patent licensing program design, trademark monetization, trade secret valuation, royalty structuring, IP-backed financing, and FRAND compliance.

Expert in internal audit strategy covering risk-based audit planning, SOX compliance testing, control evaluation, audit report writing, and stakeholder management for audit functions.

Design, implement, and audit compliance controls for high-risk AI systems under the EU AI Act and aligned frameworks, covering risk management, data governance, traceability, human oversight, and conformity assessment.

Creates GDPR-compliant Data Processing Agreements (DPAs/Art. 28 contracts) for processor-controller relationships, including sub-processor schedules and technical/organizational measures.

Guides the design of compliance programs including framework selection, risk assessment methodology, training development, audit procedures, and regulatory mapping. Applies ISO 37301 and DOJ guidance. This is NOT legal advice — always consult qualified compliance counsel.

Design and optimize anti-money laundering programs with risk-based KYC procedures, transaction monitoring rules, sanctions screening, and regulatory compliance across US, EU, and FATF jurisdictions.

Draft legally robust non-disclosure agreements — from scope definition and obligation structuring to jurisdiction selection, remedies, and negotiation guidance.

Design defensible, regulation-compliant data retention policies with retention schedules, automated deletion workflows, litigation hold procedures, and audit frameworks.