Five years ago, on May 25th, 2018, the GDPR became enforceable. To mark this anniversary, Alex Carroll, a privacy consultant at TechGDPR, reflects on the changes that took place in the European privacy landscape over that period, considers the opportunities it has created for organizations and provides some insights into…
Alex Carroll
Consulting Manager at TechGDPR DPC GmbH Alex Carroll is consulting manager at TechGDPR DPC GmbH, a small privacy consultancy that offers projectbased and hourly consulting in data protection, training, DPO as-a-service, EU representation and ISO27001 implementation support. He leads a small team of highly motivated and experienced privacy and tech consultants, manages key accounts, and develops upskilling strategies for his team to stay atop a fast-evolving field.He was part of the drafting committee that led to the 2020 publication of the DIN Spec 4997 Privacy by Blockchain Design. More recently, he was invited to speak and moderate at the 2022 PECB Insights conference in Brussels on the topics of cookies and blockchain security. He and his team are about to release regular videos on TechGDPR’s youtube channel related to privacy compliance management from a distinctly European perspective. He has developed the self-paced GDPR-for-product-ownersand- software-developers training course and a standard GDPR compliance audit methodology and will soon offer an internationally recognised 3rd-party-certified training on EU data protection. His background in adult education and elearning design led him to dive into quality management frameworks. It was while determining how the GDPR informed the context-of-the-organisation clause under ISO 9001 that he was led down the rabbit hole of data protection, struck by the parallels between normative and statutory compliance and comparable stakeholder management strategies.