Skip to content
easydatenschutz – Kanzlei für IT-Recht & Datenschutz
Available for new mandates from October 2026Certified AI Officer, AI Manager & AI governance specialist

Your Interim Privacy & Compliance Counsel for Germany and the EU

Your legal bridge into the German and EU market — pragmatic support embedded in your team and your development projects, from quick assessments to interim mandates of up to 12 months.

German attorney (Rechtsanwältin) for IT law, privacy and compliance. I don't slow innovation down — I make it legally possible.

Book a free intro callExplore services
Alicja Wilczek – Rechtsanwältin für IT-Recht, Datenschutz und Compliance

Legal should carry projects forward — not hold them back.

0

Practicing since

0+

completed projects

0

working languages: EN / DE / PL

CERTIFICATES

certified AI Officer, AI Manager & AI governance specialist, among others

Emergency & crisisAround the clock — including weekends and public holidays.

Data breach or cyber attack? I'm available 24/7.

In a security incident you don't need memos — you need clear decisions. I help immediately with legal triage, the 72-hour breach notification deadline and coordinating next steps.

  • Cyber attack & ransomware
  • Data breach
  • Authority order
  • 72-hour notification deadline
Call emergency hotlineRead about crisis management

Services

One counterpart for privacy, IT law, security, AI and crisis management

A single project, a standing mandate, an interim role or an acute emergency inside your team — you always get senior-level work with no hand-offs and no law-firm ping-pong.

How I work

Three engagement models that fit real teams

You decide how much legal capacity you need and when. I adapt to your project rhythm, not the other way round.

  • 01

    Project-based

    Fixed scope with a defined outcome: a DPIA, EU AI Act readiness, a contract package, a privacy audit or a gap assessment.

    Fixed deliverable · a few days to several weeks

  • 02

    Interim / fractional counsel

    I work embedded in your team — in your tools, your stand-ups, your projects. Parental-leave cover, project peaks, building a privacy or compliance function from scratch.

    1–5 days per week · 3 to 12 months

  • 03

    Retainer & external officer roles

    Ongoing support as your external Data Protection Officer, whistleblowing officer, IT security officer or AI officer, with agreed response times.

    Monthly retainer · open-ended

Why easydatenschutz

Legal that speaks product

I come from the reality of software, data and AI projects. So you don't get memos nobody can implement — you get decisions your team can build on.

Alicja Wilczek

Alicja Wilczek, German attorney and certified privacy & compliance specialist. Since 2018 I have helped companies navigate data protection, IT law, AI compliance and crisis management — pragmatic, solution-oriented and in your language.

  • Tech-savvy and inside the project

    I join sprints, tickets and architecture reviews. Privacy by design happens where the product is actually built.

  • An enabler, not a blocker

    Instead of "not allowed", you get a legally sound path: options, risk assessment and a clear recommendation.

  • Three languages, one standard

    English, German and Polish — for international teams, group headquarters and German authorities alike.

  • One partner across four disciplines

    Privacy, IT security, whistleblowing and AI governance in one consistent framework, with no gaps between advisors.

  • Senior level, no hand-offs

    You always talk to me. No rotating associates, no internal escalation chains.

  • Fast and pragmatic

    A reply within 24 hours on business days, and assessments in days rather than weeks.

Credentials

Certified in five disciplines

The officer roles companies need to fill today — covered by one person.

  • Certified External Data Protection Officer

    GDPR-certified external DPO for companies in Germany and across the EU.

  • Certified Data Protection Auditor

    Certified for privacy audits, vendor audits and gap assessments.

  • Certified IT Security Officer

    Certified for security governance, policies and incident response support.

  • Certified Whistleblowing Officer

    Certified under the German Whistleblower Protection Act (HinSchG) for reporting channels.

  • AI Officer & AI Governance Manager (LUTOP)

    Certified for AI governance and the EU AI Act — risk classification, governance frameworks and AI literacy.

Interactive self-check

How GDPR-ready is your company?

8 questions, 2 minutes, instant result – anonymous, no data is stored.

  1. 1.Have you appointed a data protection officer (mandatory in Germany from 20 people processing data)?
  2. 2.Do you maintain an up-to-date record of processing activities (RoPA)?
  3. 3.Are your website's privacy policy and legal notice up to date?
  4. 4.Have you signed data processing agreements with all vendors (cloud, IT, payroll)?
  5. 5.Are your employees trained in data protection regularly?
  6. 6.Is there a documented data breach process (notification within 72 h)?
  7. 7.Can you answer access and erasure requests on time (1 month)?
  8. 8.Are your technical and organisational measures (TOMs) documented?

0 of 8

Client voices

What companies say

  • „We brought Ms Wilczek in as external DPO for our SaaS company. She speaks the language of our engineering team, assesses risks quickly and documents decisions so we can keep shipping.“

    Managing Director

    HR Tech, ~80 employees

  • „During a ransomware incident she was available within hours. Her clear structuring of the 72-hour notification and authority communication took a huge load off our team.“

    COO

    E-Commerce, ~250 employees

  • „The EU AI Act was a black box for our product team. Ms Wilczek broke down the risk classification and governance structure so we could turn our roadmap into concrete next steps.“

    Product Lead

    Legal Tech / AI, ~45 employees

FAQ

What to know before we work together

  • How is interim counsel different from a traditional law firm?

    I work embedded in your team, in your tools and rhythms. Instead of isolated opinions, you get practical decisions that can be implemented immediately — no handovers, no back-and-forth.

  • How quickly can you start?

    For urgent incidents I am available within hours. For interim or project mandates, a start within 1–2 weeks is usually possible, depending on current capacity.

  • Do you work on-site or remotely?

    Both. Many mandates run hybrid or fully remote — especially for international teams. For kick-offs, workshops or crisis situations I am also available on-site when needed.

  • What does a retainer or interim mandate cost?

    It depends on scope, duration and responsibilities. Projects are quoted with a fixed scope; interim mandates are usually billed on a daily or half-day basis. I will prepare a tailored option in a short intro call.

  • Which languages do you work in?

    German, English and Polish — written and spoken, including authority correspondence and contract negotiations with international partners.

Free download

GDPR & AI Act checklist for development projects

The questions I ask first in software and AI projects — as a compact checklist for your product and engineering team.

  • Privacy by design: what to settle before the first commit
  • Roles, processing agreements and international transfers
  • AI Act risk classification in five steps

No newsletter, no sharing with third parties.

Let's talk about your project

30 minutes, free and without obligation. Afterwards you'll know whether and how I can help.

Book a free intro callExplore services
Book a free intro call