Skip to content
MVPeopleGroup
Privacy & DPO

Privacy Compliance Advisor

UtrechtFreelance / ZZP (MVPeople)HybridSenioroverheid

About the assignment

A leading national government organisation is modernising its specialised information systems. You join a dedicated compliance team within the programme office, helping development teams integrate privacy, security, and information governance from design through delivery.

You work independently and collaboratively to translate complex regulations into practical requirements. Your role bridges legal obligations and agile development, ensuring systems meet strict Dutch and EU data protection standards.

This is a hybrid role in Utrecht for 24 months, starting as soon as screening is complete.

Your responsibilities

  • Draft written privacy and data protection advice for development teams addressing compliance questions that arise during design and build phases
  • Conduct and document Data Protection Impact Assessments (DPIAs) to identify privacy risks and recommend security controls
  • Define compliance requirements in writing for development teams to apply when designing and building new functionality
  • Prepare justified decision memos for programme leadership on 'comply or explain' situations
  • Review and comment on compliance advice, assessments, requirements and documentation prepared by colleagues
  • Perform and document compliance control activities to verify that requirements are actually implemented by development teams
  • Operate as a trusted advisor across operational, tactical and strategic levels, balancing legal requirements with practical delivery

Tech Stack & Tools

Frameworks & Standards

GDPR (General Data Protection Regulation)Dutch Data Protection ActPolice Data Act and DecreeCriminal Code (Wetboek van Strafrecht)Criminal Procedure Code (Wetboek van Strafvordering)

Methodologies

Data Protection Impact Assessment (DPIA)Risk management and risk analysisAgile requirements definitionCompliance controls and auditing

Certifications (preferred)

CIPP/E (Certified Information Privacy Professional - Europe)CIPM (Certified Information Privacy Manager)

Must-haves

  • HBO-level qualification (or equivalent via EVC)
  • Proven experience with GDPR, Dutch Data Protection Act, and Police Data Act in practice
  • Minimum 3 years solving compliance questions in the Dutch public sector (national, local or safety chain organisations)
  • Minimum 3 years conducting Data Protection Impact Assessments in large organisations (1,000+ employees)
  • Minimum 3 years defining requirements in Agile development environments
  • Current knowledge and 5+ years experience with Criminal Procedure Code and Criminal Code (last 5 years)

Nice-to-haves

  • Experience within comparable government organisations or their chain partners
  • Track record in risk analysis and information security risk management
  • Background in criminal law or judicial procedure (strafvorderlijk taakaccent)

What we offer

  • Hybrid working in Utrecht (36 hours/week)
  • 24-month contract; freelance (ZZP) available
  • Work on a mission-critical national modernisation programme
  • Collaborate with multidisciplinary teams in a secure government environment
  • Influence how privacy and security are embedded in digital systems from the ground up
  • Personal guidance from a dedicated MVPeople consultant who knows your niche

The process

1

Introduction

Phone call with your MVPeople consultant (within 24 hours)

2

Match & Brief

We discuss the assignment in detail and prepare you

3

Client meeting

Introduction to the client

4

Start

Contracting and onboarding

Details

Type

Freelance / ZZP (MVPeople)

Location

Utrecht

Work model

Hybrid

Level

Senior

Industry

overheid

Market indication

€105 - €135 per hour

Posted

1 October 2026

Job ID

58476



Contact

Apply nowMore information
Apply now