Thierry DOLLAT

Cardiac Rhythm Management, medical devices and digital health services. Headquarters (established 1977, Revenue $150M, 900 employees). Reporting to the VP Legal & Compliance, designated DPO for all EU entities, I advised the President and all VPs and I got myself involved in all new projects. As a Business Partner, I supported the teams by swiftly answering tenders, reviewing contracts as well as clinical trials agreements I improved compliance, starting with processing activities involving our customers’ Patients (Personal health Data). Clinical Trials: • Together with a Privacy Liaison, reached and documented adherence to the Reference Methodologies set by CNIL. • Organized and reviewed the Data Protection Impact Assessment (DPIA) of Clinical Trials. Contract drafting and reviewing: • Wrote the Data Processing Agreement (DPA) templates for suppliers (Processors) and third parties (Joint, Controllers, tripartite agreements defining interoperability). • Drafted the Remote Monitoring System contract template for customers. • Wrote the Specifications of Processing and the Technical & Organizational security Measures (TOM) for RMS, Programmers and other services. • Improved the Information and Consent Forms for Patients: clinical trials, RMS, anonymization (further processing of personal data, AI). • Answered audits (Cyber Essentials and client’s questionnaires), negotiated DPA for sales, purchasing and legal teams. Audits: • Drafted the Data Retention Policy and audited it’s implementation by HR, Clinical Affairs, Post-Market Surveillance, RMS and Arrhythmia services. • Outsourced the security audits of vendors (Processors). Additional duties on InfoSec management, CISO. • Outsourced a gap analysis (ANSSI’s Guidelines), and EBIOS Risk Analysis on IT: infrastructure, manufacturing and ERP. • Managed the implementation of the mitigating measures / ISSP. • Drafted procedures, the IT Acceptable Use Policy & confidentiality commitment, created an eLearning course.

Journalists’ Database (harvesting) and SaaS (sending Press Release). Subsidiary (Established 1879, Revenue $50M, 500 employees). Reporting to the GM, I contributed to the definition of Cision’s global GDPR compliance framework and I delivered its French implementation: • Evangelized privacy principles and audited production, marketing and HR departments (20 interviews). • Trained and supported the Sales Team. • Selected lawfulness of processing, identify major Processors and pinpoint Transfers of data outside the EU. • Conducted risk assessment and gap analysis for all layers of GDPR requirements. • Reviewed the EMIA Joint Controller / Processor suppliers’ and customers’ addendums. • Built deliverables that solved most of the non-compliance or shortcomings. I built the GDPR compliance evidence documentation by completing the following tasks: • Filled out a very detailed Record of Processing Activities. • Identified, listed and tracked gaps. Wrote 10 Privacy by Design guidelines for customers’ SaaS portals. • Instructed on how to amend web and paper forms. • Wrote Supervisory Authority control guidelines, Data Subject Information and Access Requests procedures for the different stakeholders and assigned roles. • Logged other artifacts such as copies of contracts, emails, minutes of meetings, etc... All for Accountability purposes.

Test benches for manufacturers. Proposed launch of a wholly-owned Vinci Energies subsidiary.

Energy transport & saving, monitoring for cities. Subsidiary (Established 1954, Revenue $10M, 60 employees). Reporting to AUGIER Sales Manager for France. Role: Prospect City Halls to ensure that AUGIER's solutions are specified in calls for tender and that its products are referenced in public procurement contracts. Results: Made around a hundred cold calls, updated the CRM, and visited 58 prospects during seven business trips across eleven counties. Qualified and recorded a substantial portfolio of potential customers for the sales pipeline. Identified business opportunities for several urban lighting projects in towns with a population between 5,000 and 200,000. Engaged potential integrators such as Bouygues, Eiffage, Spie, and Vinci, and convinced them to collaborate. Promoted AUGIER's airfield lighting CCRs offer to small Airports. Assisted a Salesman representing AUGIER as Manufacturers’ Sales Agency.

Electronic device protecting consumers against fraud and counterfeiting. Need: Living in China, I experienced first-hand the risks of being a potential victim of counterfeiting, such as the instance of fake medicines being sold as originals. These encounters highlighted the compelling need for a product verification solution. Solution: During the announcement of the Google Pixel, the first smartphone to bridge the power of Android and its applications with the promise of NFC technology, I realized that I had the opportunity to empower Chinese consumers by literally placing a tangible solution into their hands, safeguarding them against fraud and counterfeiting. As using a standard NFC tag also constitutes a weak solution that can be reused (fake goods in an authentic packaging), I undertook the development of an innovative printed electronic function to strengthen the solution. Approach: Analyzed various FMCG supply chains, to take into account any critical issues related to manufacturing, logistics, in-store presentation, consumption, recycling or disposal of a genuine product. Conducted in-depth market research to understand stakeholder needs, validate the problem, and iteratively enhance the solution's robustness. Evaluated the methods and solutions proposed by competitors and potential partners in order to position the development of a differentiated offering and a sound Value Proposition. Defined a strategic roadmap and devised a comprehensive sales action plan. Estimated the technical and human resources requirements essential for successful deployment. Prepared detailed financial forecasts and documented a structured business plan. Results: pitched the initiative at the "Business Accelerator 06" event and submitted to the CNCE national competition, but no funding was secured nor selection was achieved. This outcome jeopardized eligibility for a further level of support from the Incubator, posing significant roadblocks to the realization of my vision.

Consumer electronics. Family-owned (Established 1976, Revenue $x0M, 20 employees). Reporting to the owner and founder of DAT, a company that imports car radios, videos, and navigation systems sold to category specialist retailers under the Takara brand. Role: Arrange the customization and importation of OEM items, from sourcing in China to warehouse entry in France. Responsibilities: Identifying and contacting suppliers, requesting price quotes, obtaining samples, arranging for sample evaluation and factory audits, securing product and packaging customization, drafting precise Purchase Orders and Letters of Credit, reviewing these with banks and negotiating with suppliers, managing freight forwarders, organizing final inspections, collecting paperwork, preparing documents for customs clearance, and scheduling towing. Results: Independently managed the importation of $22M worth of goods by air and sea. Successfully executed numerous and varied tasks simultaneously, adapting to unsynchronized cycles and differing completion speeds. Efficiently handled unforeseen circumstances arising from the balance between (aggressive) cost, deadline, and quality.

Electronics for e-retailers. Private (Established 2000, Revenue xM¥, 5 employees). Hi-Tech Direct is an independent trading company specializing in the distribution of electronic repair parts and accessories. Founded and developed the company over a decade-long tenure. Handled the complex set up, coding (using PHP and SQL), hosting, and maintenance of an online catalog, contributing to the osCommerce community in the process. Sourced a hundred different items and performed audits to qualify suppliers. Took care of all aspects of procurement, including testing goods for technical performance, preparing orders, and drafting shipping documents. Prospected and secured customer loyalty in a dozen countries across five continents, establishing a value proposition centered on a commitment to swift responsiveness, excellent service and No Compromise quality.

FMCG. Private (Established 1999, Revenue xM¥, 5 employees). Reporting to the Entrepreneur. Role: Oversee and execute all functions of the purchasing office, ensuring smooth operations and efficient procurement processes. Results: Sourced a dozen new suppliers, conducted factory inspections, facilitated the development of new items, negotiated prices and deadlines. Organized production schedules and managed deliveries, from the issuance of purchase orders to the inspection of containers. Provided comprehensive support to customers, including a French manufacturer and various international wholesalers, throughout the sales process, from initial quotations to final invoicing. Prepared and launched the production of a new item for the opening of a factory, which included transferring a customer's industrial know-how (outsourcing). Acquired valuable skills and expertise in the import-export sector.