Oversee data privacy compliance reviews across various countries, processes, IT applications/ infrastructure and vendors • Conduct due diligence of all subcontractors, third parties, vendors before sharing of personal data with them • Review contracts and agreements with respect to privacy needs and ensure privacy compliances are incorporated in the same • Ensure any non-compliances are timely identified and remediated Data Privacy Impact Assessments • Ensure personal data in the organization is identified, classified and inventoried • Advise on the necessity of data privacy impact assessments (DPIAs), the manner of their implementation and outcomes. Incident Response & Breach Management • Ensure mechanisms are in place to identify and respond to personal data beaches • In case of a personal data breach, ensure timely notification to the data protection authority and data subjects (wherever required) about the breach • Assist with investigations regarding data breaches as per applicable Privacy laws and undertake reporting/remedial action as required. Maintain a log of any incidents and remedial recommendations and actions. Data Subject Rights & Processing • Ensure timely response to personal data related queries and data subject requests or complaints • Monitor management of rights exercised by data principles and report on the compliance status Training and Awareness • Promote Data protection awareness throughout the organization by providing training and written procedures that are widely disseminated and made available to all staff and branch officials
Oversee data privacy compliance reviews across various countries, processes, IT applications/ infrastructure and vendors • Conduct due diligence of all subcontractors, third parties, vendors before sharing of personal data with them • Review contracts and agreements with respect to privacy needs and ensure privacy compliances are incorporated in the same • Ensure any non-compliances are timely identified and remediated Data Privacy Impact Assessments • Ensure personal data in the organization is identified, classified and inventoried • Advise on the necessity of data privacy impact assessments (DPIAs), the manner of their implementation and outcomes. Incident Response & Breach Management • Ensure mechanisms are in place to identify and respond to personal data beaches • In case of a personal data breach, ensure timely notification to the data protection authority and data subjects (wherever required) about the breach • Assist with investigations regarding data breaches as per applicable Privacy laws and undertake reporting/remedial action as required. Maintain a log of any incidents and remedial recommendations and actions. Data Subject Rights & Processing • Ensure timely response to personal data related queries and data subject requests or complaints • Monitor management of rights exercised by data principles and report on the compliance status Training and Awareness • Promote Data protection awareness throughout the organization by providing training and written procedures that are widely disseminated and made available to all staff and branch officials