Long-term governance and management support for data protection, AI and information security. Reserved consulting capacity, rapid responsiveness and close involvement in your business.
Ideal for businesses that need ongoing expertise in data protection, AI governance and information security, without hiring a full-time specialist.
Melodie Lange
Privacy & Security Consultant
I have worked in privacy since 2017, and I work directly with every client myself.
I aim to understand how a company operates, what its culture is, and what it is trying to achieve. My role is not to impose a standard compliance model, but to help implement data protection, AI and information security requirements in a way that fits the organisation.
That means working closely with the people involved, building trust and helping teams collaborate. I want to be a familiar face and trusted adviser across the business, not a faceless external consultant.
You work directly with me, and through our ongoing collaboration, I understand both the requirements and the reality of your business.
Long-term support for managing data protection, AI and information security requirements, with reserved capacity and close involvement in your business.
Reserved capacity for your company means questions and urgent topics can be picked up quickly.
Regular contact makes topics visible early, so we can act before problems arise.
Since I’m already familiar with your structures, people, and priorities, we can get straight to the point without delay.
Raise topics early without worrying about extra costs. I prioritize and steer te work.
Three monthly retainer options, designed around the level of access, continuity and involvement your business requires.
| Essential | Advanced Recommended | Premium | |
|---|---|---|---|
| Support Profile | Targeted professional support for individual topics and projects | Ongoing support for multiple topics and projects | Close, continuous support across multiple parallel topics and projects |
| On-Site Presence | 4 x per year | 6 x per year | 12 x per year |
| Consulting Calls | 2 per month | 4 per month | 8 per month |
| Parallel Topics | Individual prioritized topics | Multiple topics handled in parallel on a regular basis | Multiple topics handled continuously in parallel |
Hear directly from clients who partnered with me on GDPR compliance, ISO 27001 certification and ongoing privacy management support.
Privacy Management Consulting is long-term support for managing data protection, AI and
information security requirements. You receive reserved consulting capacity, regular access and
ongoing support through a fixed monthly retainer.
There are no rigid service packages or predefined deliverables. Within the agreed consulting
framework, we address the topics your business currently needs, such as privacy assessments, AI
projects, vendor reviews, incidents, policies or management-system work.
Yes. In fact, I encourage it. Raising topics early makes it easier to address them before they become
urgent or cause larger problems. I prioritise and steer the work within the agreed consulting
framework.
I prioritise requests based on urgency, deadlines and business importance. If you tell me that
something is especially urgent, I take that into account. Data breaches and data subject requests are
always prioritised because they have legal deadlines.
Depending on your plan, I may work on several topics at the same time or handle them one after
another.
Occasional minor overages are usually not a problem. If you know that a larger project or unusually busy period is coming up, we will discuss it in advance and agree on a fair solution that works for both sides.
If the additional need is temporary, we can arrange extra support for a limited period. If it becomes a regular pattern, we will review whether a different retainer level would be more appropriate, while ensuring that the reserved capacity of other clients remains protected.
All plans give you ongoing access to my expertise and allow you to raise questions whenever they
come up.
The difference is how closely I support your business. Essential is for selected topics, Advanced is for
regular support across several topics, and Premium is for close and continuous support across
multiple topics.
The plans also differ in the number of consulting calls and on-site days.
The 6-moth introductory phase at the beginning of our colaboration helps us see whether the selected
plan really fits your needs.
Occasional periods with more work are usually not a problem. If a larger project or a very busy period
is coming up, we discuss it in advance and find a practical solution.
If you regularly need more support, we can review whether another plan would be a better fit.
Very closely!
I work directly with the people who are involved, get to know your processes and understand how
your business works.
The goal is that I feel like a familiar part of the team, while still remaining an independent external
consultant.
Urgent topics are prioritised. This is especially important for data breaches, data subject requests and
other matters with legal deadlines. If something is urgent, simply let me know and I will adjust
priorities where possible.
The service is designed for long-term support. New clients start with a six-month introductory phase.
This gives us time to see whether we work well together and whether the selected plan is the right fit.
After that, the engagement is based on a twelve-month term.
I’ve been working as a privacy and information security consultant since 2017, and have been supporting AEC software companies since 2018.
That means I understand the realities behind the theory:
complex software products, customer due diligence, enterprise sales cycles, project-based work, integrations, subcontractors, and constant time pressure from day-to-day business.
That’s why my work focuses on building complete, practical systems, abstract advice, so compliance actually fits how these companies work.
Diploma in Law
Ludwig Maximilian University of Munich
Certified Data Protection Officer (IHK)
•
CIPP/E - Certified Information Privacy Professional/Europe)
•
CIPM - Certified Information Privacy Manager
Certified ISO/IEC 27001 Lead Auditor (TÜV)
•
CompTIA Security+ Certified
•
Chief Information Security Officer (CISO) Certified
Law
Data Protection
Information Security
Certified Data Protection Officer (IHK)
iapp Certified Information Privacy Professionals/Europe (CIPP/E)
iapp Certified Information Privacy Manager (CIPM)
Certified ISO IEC 27001 Auditor (TÜV)
CompTIA Securiy+ Certified
Certified Chief Information Security Officer (CISO)
Because I work closely with each client, spots are limited.
If you’re ready to finally get GDPR handled with less stress and more clarity, I would d love to hear from you.
Apply now to explore if we’re a good fit.
Recht
Diplomjuristin (LMU)
Datenschutz
IHK zertifizierte
Datenschuftbeauftragte
iapp Certified Information Privacy Professionals/Europe (CIPP/E)
iapp Certified Information Privacy Manager (CIPM)
Informationssicherheit
TÜV-zertifizierte ISO IEC 27001 Auditorin
CompTIA Security+
zertifiziert
Certified Chief Information Security Officer (CISO)
Because I work closely with each client, spots are limited.
If you’re ready to finally get GDPR handled with less stress and more clarity, I would d love to hear from you.
Apply now to explore if we’re a good fit.
Contact me via the contact form or per e-mail.