Bokou Charles MELY

1. Risk & Compliance Consultant in a Post-Merger Integration for a global leading company in mobility and leasing industry - Perform Gap Assessments on GDPR & Privacy Normative framework, Operational process & drafting actions plan and roadmap - Assessing gaps between GDPR and specific foreign regulations to adjust the integration roadmap with the forecast normative framework and operating model - Define the set-up of Target Operating Model roadmap for compliance functions - Draft of Integration Roadmap for local and Central Privacy functions to prepare the integration - Ensure the transition to the Target Operating Model post-Integration and its operational implementation across 40 countries - Support the business to ensure compliance of pre-integration and post-integration data transfers - Draft Internal GDPR Procedures, Standards, Guidance to build an uniformized normative framework for Privacy process and Governance - Assess the approach for filing GDPR Binding Corporate Rules (BCRs) for the Global Company under legal firm analysis and advise for leading Data Protection Authority - Support the implementation of uniformized Privacy Management tool in Central functions and local entities - Draft of GDPR mandatory clauses for central functions and local entities for contracts with suppliers - Provide assistance to the business to ensure compliance of Consent Management Platform, websites, Data Subjects Request Management, Data Breach Management 2. Data Compliance Consultant for a European Union public authority on a GenAI project - Support the realization of DPIA on Microsoft Gen AI Tools - Identification and assessment of the relevant risks, security measures in place and evaluating the remaining risks 3. Compliance consultant in an anti-money laundering Audit - French Leading Insurance company 4. Publication of a position paper on European Union DATA ACT 5. Part of Accenture France Squad "Risks and compliance emerging trends"

- Audit of compliance documents for a railway infrastructure manager - Assisting a government in sub-Saharan Africa with the legal and strategic security of data from the general population census hosted by a private cloud provider - Support for the internal DPO of an organisation specialising in the distribution of insurance products

- Support, training and awareness-raising for compliance officers in subsidiaries, divisions and offices abroad (Africa, South America and South-East Asia) and at parent company level - Mapping of foreign regulations and drafting of reference documents (procedures, contractual frameworks, information notices, etc.) for the Group and for foreign offices - Support for business units in reviewing, drafting and negotiating personal data protection clauses (Asia, Eurasia and Africa) - Data protection risk analysis and impact assessment for internal projects (HRIS, database restructuring, investment projects, etc.) for head office and foreign offices (Asia, Eurasia and Africa) - Conducting interviews to map personal data processing and improve the quality of the processing register - Supporting compliance officers at head office and abroad in implementing the compliance action plan - Participating in legislative analysis workshops with international donor experts and AFD's partners with technical service providers (World Bank, KfW, European Investment Bank, DFID, German Development Bank, Expertise France, etc.) on draft data protection laws in the countries in which we operate - Negotiation of data-sharing agreements with legal entities governed by international public law that are not subject to national data protection laws (International Finance Corporation) - Legal Watch of data protection legislation and regulations in France and around the world

- Reporting and formalising the risks of litigations relating to the protection of personal data - GDPR remediation for Cloud contracts (SaaS, PaaS, Iaas), technical support and software contracts -Integration of personal data processing activities into OneTrust tool -Impact Analysis (PIA) of IT & Innovation projects -GDPR and cyber risk monitoring in the financial sector - GDPR risk analysis for outsourced services (PSE) and essential outsourced services (PSEE) using the Ramos tool

-Maintaining the register of personal data processing -Implementation of the RGPD compliance action plan for estate genealogy and the service for dormant accounts and dormant contracts (Eckert Law) -Drafting of contracts and amendments for RT/ Co-RT/ ST relationships -General documentation of compliance: internal processes, business unit compliance, management of requests for right of access and exercise of other rights under the GDPR -Legal and regulatory monitoring (RNIPP, Open Data, CNIL, etc.)

-Protection procedures for patents, designs and trade marks within the OAPI (African Intellectual Property Organisation) area -Reflections on the protection of traditional knowledge -Reflections on the protection of Protected Geographical Indications (PGIs)

-1st and 2nd year undergraduate courses on the fundamentals of documentary research and article writing -Teaching on legal databases: Dalloz, Lexis 360, Lamy, Doctrinal Plus, as well as humanities, mathematical and natural sciences databases -Teaching and leading collaborative work -Preparation and design of courses and training materials -Learning innovative digital tools in a university environment