The Data Privacy & Compliance Specialist will be responsible for ensuring organizational compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and associated rules.
This role involves developing policies, implementing controls, and monitoring adherence to data protection obligations for personal data processed within India.
Key Responsibilities:
• Regulatory Compliance & Governance: Interpret and implement requirements of the DPDP Act and Rules across business processes.
• Develop and maintain a Data Protection Framework aligned with DPDP obligations.
• Ensure compliance with data fiduciary and data processor responsibilities.
• Policy & Process Development: Draft and enforce Privacy Policy, Consent Management, and Data Retention Policies.
• Establish procedures for data subject rights (access, correction, erasure, grievance redressal).
• Risk Assessment & Impact Analysis:
Conduct Data Protection Impact Assessments (DPIA) for recent projects.
• Identify and mitigate risks related to personal data processing.
• Data Classification & Handling: Implement data classification framework for personal and sensitive personal data.
• Ensure secure storage, encryption, and transfer of personal data.
• Incident Management & Reporting: Define and manage personal data breach response plan.
• Coordinate with the Data Protection Board of India for mandatory breach notifications.
• Training & Awareness: Conduct regular privacy awareness sessions for employees and vendors.
• Vendor & Third-Party Management: Ensure DPDP compliance in contracts and data processing agreements.