Data Protection Impact Assessment

About this task

This Series B healthcare services group for primary care (201–500 employees) is looking for a director Privacy & GDPR Counsel for a single piece of work with a fixed scope and a fixed price. Risk assessment for a high-risk processing activity.

A fresh pair of experienced eyes is needed, and the result is a document or file the team can use straight away. It works in healthcare, so patient data is never part of the task and privacy rules are strict.

The work is fully remote. Any location in Poland works, with a few hours of overlap with the team's day. You choose your hours; nothing is scheduled except an occasional short call. About 1 hour a week should overlap with the team's day (CET).

What you deliver

• Prepare a DPIA for a new employee monitoring tool with a risk register and mitigations.
• The finished deliverable in the agreed file format, with sources and assumptions listed
• A 20-minute walkthrough call, or a recorded screen share if you prefer
• A final note stating what was checked and what was left out of scope

How the work runs

• Day 1: kickoff call and access to the files
• Days 2 to 7: the work, with questions answered the same day
• Last day: delivery and a short walkthrough

Duration: about 10 working days. Accepted when the output matches the agreed checklist and the sample check passes; the recruiter confirms by e-mail.

Tools

How you get paid

• The company prepays Deftridge before your first hour, so payment does not depend on a late invoice.
• Deftridge pays you in EUR after the company confirms the hours or the deliverable. The payment date is written in your task agreement.
• You work as an independent contractor: you report your own income, and your recruiter sends the statements your accountant needs.
• You never chase the company. Questions about money go to Deftridge.

What happens after you say you're interested

1. Within one working dayA recruiter writes to you to confirm your hours and the rate you want.
2. You agree the rateYou and the recruiter fix an exact rate inside the company's range. You decide whether to go ahead.
3. With your written OKThe company sees the anonymous profile below. Most companies answer within three working days.
4. StartYou sign the task agreement and the company's confidentiality terms through Deftridge, and begin on the date above.

What the company sees about you

First name, field, experience, tools and the hours you offer. Not your surname, your employer or your contact details.

How this rate compares

The midpoint of this range, €42 an hour, is above the median director Privacy & GDPR Counsel rate in Poland (€40). The shaded band is the 25th to 75th percentile of the market.

All Privacy & GDPR Counsel jobs in Poland · Privacy & GDPR Counsel rates in Poland · Legal jobs

Questions about pay and privacy

The rules are the same for every task. Pricing explains the 15% fee, prepayment and when you are paid; How it works covers matching, what the company sees and side work next to a job.