DPD/DPO · Artificial intelligence

DPO expert in artificial intelligence for companies already using AI.

When a company processes personal data with AI, the Data Protection Officer must understand the technology, not just the law. Manuel Navarro Rajoy is a DPO certified by the AEPD (register A2025166DPD) and also a software engineer: he coordinates the GDPR and the AI Act through a single point of contact.

Why the profile matters

A DPO who doesn't understand AI cannot supervise it.

The GDPR requires independent oversight of data processing, and increasingly that processing is carried out with artificial intelligence: scoring, segmentation, chatbots, CV screening, biometrics. A DPO without a technical profile is confined to the paperwork; one who also builds software can review the model, the training data, the logs and the human oversight, and coordinate the GDPR with the AI Act without contradictions.

What it includes

  • Continuous GDPR oversight of AI-driven processing.
  • Coordination with AI Act compliance (inventory, risk, transparency).
  • Impact assessments (DPIA) when the processing is high-risk.
  • Review of AI vendors and international data transfers.
  • Liaison with the AEPD and, where applicable, the AESIA.

Who it's for

  • Companies that have brought AI into HR, marketing, customer service or risk.
  • Organisations required to appoint a DPO that use AI on personal data.
  • Law firms and public bodies that need technical and legal judgement in one profile.
  • Companies that prefer an external DPO to expanding their headcount.
Defence

And if an inspection or a dispute over the AI arrives…

The same professional who oversees your compliance is a Court-Appointed Computer Forensic Expert (TIP 639): he can prepare and ratify forensic evidence before the AEPD, the AESIA or a court. Compliance and defence, without changing provider.

Frequently asked questions

Frequently asked questions

What is a DPO expert in AI?

A Data Protection Officer who, in addition to mastering the GDPR, understands artificial intelligence technology: they can oversee AI-driven processing, review models, training data, logs and human oversight, and coordinate the GDPR with the AI Act.

Why do I need a DPO with a technical profile if I use AI?

Because most AI systems process personal data and privacy decisions (impact assessments, human oversight, transparency) are only actionable if you understand how the system works. A DPO without a technical profile stops at the paperwork.

Does the DPO expert in AI replace AI Act compliance?

No: they are complementary. The DPO continuously oversees data processing; AI Act compliance organises the AI Regulation's obligations (inventory, risk classification, transparency). They are coordinated so as not to duplicate work.

Is it compatible with the external DPO?

Yes. This service is an external DPO with a technical AI profile; it can be engaged as a monthly retainer, just like the standard external DPO and under the same pricing model.

Direct contact

If your company processes data with AI, your DPO should understand AI.

Tell me which AI systems you use and on what data. I'll prepare a free initial assessment within 24 business hours, with a fixed scope and price.