Everyday privacy advice
Assessing questions about personal data, purposes and lawful bases. Translating advice into practical arrangements for legal teams, management and the business.
All services
Embed AI · Zahed Ashkara
Freelance privacy consultant for GDPR advice
Embed AI provides privacy and GDPR advice through Zahed Ashkara, a freelance AI and privacy consultant and legal counsel. I help your team with personal data, DPIAs, agreements and privacy policies. Engage me for a specific assessment or interim support, including questions that have no connection with AI.
How I support your team
DPIAs and privacy risks
Support with DPIA screening, impact assessments, measures and decision records. The depth of the assessment follows from the specific processing activity.
Agreements and suppliers
Reviewing privacy terms, data processing agreements, roles and data flows when procuring and working with suppliers.
Privacy policy and governance
Clarifying responsibilities, privacy information and working processes. For AI applications, I connect this with AI governance.
How do we start?
- 01Discuss your question, team and required support.
- 02Agree the work, required information and rate.
- 03Assess, advise and work with your team on next steps.
Who you engage
Zahed Ashkara is a legal counsel and freelance AI and privacy consultant, with assignments at Rabobank, Sanoma, drinking water utility PWN, central government and municipalities. Certified AI Compliance Officer and member of the NEN AI & Big Data standards committee.
View my experienceDownload profile (PDF)Practical privacy and GDPR knowledge hub
Frequently asked questions
Can you advise on privacy without an AI question?
Yes. Privacy and GDPR are a standalone Embed AI service, including data processing, agreements, DPIAs and privacy policies.
Can you provide temporary support for our privacy team?
Yes. We agree the work, start date, hours and duration. Support can include everyday advice, reviewing assessments or assisting a project.
Is a DPIA required for every processing activity?
No. Whether a DPIA is mandatory depends on factors including the nature, scope, context and purposes of processing and the likelihood of a high risk to people. We first assess the specific situation.
How do privacy and AI governance relate?
AI applications involving personal data raise privacy questions alongside questions about AI use. I help connect those assessments, with clear responsibilities and decisions.
What does privacy advice cost?
We determine the rate and commitment based on the assignment and agree these upfront. You can start with a conversation or the free privacy and AI scan.
Legal source: AVG / GDPR, including Articles 5, 6, 28 and 35.
Discuss your assignment
Include the desired start date, weekly hours and duration if known.