Victoria Gonzales

About

Experience

Governance professional with 5+ years of international experience across Privacy, AI Governance, Legal Operations and Regulatory Compliance in technology-driven organizations and startups. Expert in implementing GDPR compliance, EU AI Act readiness and privacy-by-design principles while optimizing legal processes and leveraging LegalTech solutions.

Proven ability to assess risk, support privacy operations, automate compliance workflows and enable responsible AI adoption. Known for a customer-centric mindset, clear communication and a strong commitment to building a culture of compliance, security and continuous improvement across cross-functional teams.

Location
Berlin, Germany
Email
vagp89@gmail.com
Phone
+49 173 38 37579
LinkedIn
victoria-gonzales ↗

Experience

Work history

Mar 2025 — Present

Privacy and Legal Tech Consultant

82DASH Startup · Berlin, Germany

Lead AI compliance and EU AI Act implementation, aligning internal workflows and product features with evolving regulations. Drafted and implemented Privacy Policy, DPA and Terms of Service ensuring compliance with GDPR, UK GDPR and CCPA. Designed click-through DPAs and supported data mapping, consent management and third-party risk assessments, including AI tools. Delivered privacy and AI-awareness training to cross-functional and non-legal teams.

Sep 2022 — Oct 2024

Legal Operations Specialist (Legal Tech & AI Enablement)

Delivery Hero · Berlin, Germany

Drove adoption of Generative AI tools (Microsoft Copilot, ChatGPT, ReviewAI) to enhance contract review, research and drafting. Designed AI enablement playbooks and training guides for legal, procurement and commercial teams. Supported privacy operations (DPIAs, LIAs, risk reviews) and advised on Generative AI project compliance. Implemented enterprise legal tools including DocuSign CLM, Onit, Smartsheet, TrustArc and OneTrust. Built legal intake systems using Jira, Slack integrations and custom Legal Front Door portals.

Feb 2021 — Jul 2021

Legal Engineer / Legal Tech

IUSTA · Berlin, Germany

Worked with a legal automation startup focused on consumer rights. Implemented document automation and digital workflows for high-volume consumer rights cases (e.g., Dieselgate). Developed and tested AI-assisted document review and client intake processes to reduce manual effort. Collaborated with software engineers to improve case management system usability and efficiency.

Jun 2020 — Jan 2021

Legal Engineer / Developer

ZEIT.DEV · Remote / Berlin

Supported Privacy-by-Design integration for digital products. Drafted and structured privacy policies and user notices in alignment with GDPR and ePrivacy regulations. Applied technical and legal knowledge to support data governance in software development. Tech stack: React.js, TypeScript, Tailwind, Ruby on Rails, RESTful APIs, Storyblok.

Aug 2016 — Nov 2018

Lawyer / Technical Consultant, Risk Analyst

Freedom House · Honduras

Delivered technical risk assessments for human rights defenders and journalists in collaboration with Honduras' Human Rights Protection Mechanism. Produced detailed reports and security recommendations aligned with national protection legislation. Trained and advised stakeholders on risk mitigation strategies and monitored implementation outcomes.

2013 — 2016

Compliance Officer / Lawyer

BAC Credomatic Network · Honduras

Reviewed and validated onboarding documentation for third-party businesses seeking access to financial services. Ensured regulatory compliance with KYC/AML standards and internal due diligence policies. Collaborated with business units to maintain a compliance-first approach to partner vetting and contract management.

Focus

Core expertise

Privacy & Data Protection

End-to-end privacy program support for technology organizations operating across multiple jurisdictions.

  • GDPR, DSGVO, UK GDPR, CCPA
  • Privacy by Design & by Default
  • DPIAs, LIAs & Risk Assessments
  • Data Mapping & RoPA
  • DSR Management
  • Vendor & Third-Party Risk
  • Privacy Policies & DPAs

AI Governance

Practical AI compliance frameworks that enable responsible adoption without slowing product teams.

  • EU AI Act & AI Compliance
  • AI Risk Assessments
  • AI Inventory & Use Case Analysis
  • Responsible AI & AI Literacy
  • NIST AI RMF, ISO 42001
  • AI Policies & Guidelines

Legal Operations

Scaling legal function efficiency through process design, automation and cross-functional collaboration.

  • Contract Lifecycle Management
  • Legal Intake & Front Door Portals
  • Process Mapping (BPMN)
  • Workflow Automation
  • Knowledge Management
  • KPI Dashboards & Reporting

Technology & Tools

Hands-on experience implementing and optimizing the systems that power modern legal and privacy teams.

  • Microsoft Copilot, ChatGPT, ReviewAI
  • DocuSign CLM, Onit, Smartsheet
  • OneTrust, TrustArc
  • Jira, Slack, LawVu, iManage
  • SQL, Ruby on Rails, React.js, TypeScript

Credentials

Education & certifications

Certifications
CIPP/E (IAPP) · Datenschutzbeauftragte (GFN) · GDPR DPO Skills (University of Derby) · Data Privacy & Technology (Harvard Business School) · AIGP (in progress, IAPP)
Education
Master in Commercial Law — National Autonomous University of Honduras (UNAH). Thesis on consumer personal data protection in e-commerce. Law degree — UNAH. German qualification comparability (KMK/ZAB).
Technical Training
Computer Programming Certificate — Le Wagon Berlin
Languages
Spanish (native) · English (highly proficient) · Deutsch (B2, progressing)

Conferences

Speaking & attendance

Contact

Open to new roles

I'm open for new opportunities in privacy, AI governance, legal operations and legal tech. Feel free to reach out about roles or introductions.

vagp89@gmail.com