Ezgi Ercan

Attorney at Timelex

September 2022 - Present • Brussels, België

Conducting application-focused privacy and confidentiality risk reviews (GDPR & EU AI Act), identifying data-related vulnerabilities and defining pragmatic mitigation measures with business and IT stakeholders. Advising on AI and data governance by reviewing data flow diagrams, solution designs and vendor documentation for risk assessment. Supporting clients in procurement and outsourcing of technology services by drafting and negotiating technology contracts, service level agreements (SLAs) and data processing agreements (DPAs). Providing strategic guidance on cybersecurity, data transfer assessments (TIAs), data protection impact assessments (DPIAs) and data incident response. Delivering GDPR audits, trainings, and Data Protection Officer services, Contributing to EU-funded projects on emerging technologies, digital infrastructure, AI, product safety, renewable energy, and industrial data spaces.

Legal Researcher at Council of Europe

6 mth • September 2020 - March 2021 • Brussels, België

Covered key legal and political developments within the EU, particularly those relevant to the Council of Europe, such as artificial intelligence, the GDPR, cybercrime, racism and discrimination, media and internet, freedom of expression, education, migration, and the EU's external relations with Turkey and countries in Central Asia and the Southern Mediterranean.