Description

Manage end-to-end Data Subject Rights Request (DSAR) operations across global privacy regulations, ensuring timely, accurate, and compliant fulfillment of individual rights requests while driving process efficiency, quality, and stakeholder engagement.

Responsibilities

- Manage end-to-end processing of DSARs, including access, deletion, correction, portability, opt-out, restriction, and consent withdrawal requests
- Assess request validity, identity verification requirements, and applicable legal exemptions
- Coordinate with Legal, IT, HR, Business Teams etc. to gather and review responsive data
- Ensure compliance with regulatory timelines under GDPR, UK GDPR, CPRA/CCPA, DPDPA, and other applicable laws
- Draft and issue DSAR responses and maintain complete case documentation after review
- Handle escalations, complex cases, and requests submitted by authorized agents, privacy brokers, or legal representatives
- Track DSAR volumes, SLAs, aging,



and operational metrics; provide periodic management reporting
- Support audits, regulatory inquiries, and compliance reviews related to data subject rights
- Identify opportunities for automation and process improvements to enhance DSAR efficiency and quality
- Develop and maintain DSAR procedures, playbooks, and knowledge repositories

Qualifications

- 4-7 years of experience in Privacy, Compliance or Data Governance
- Prior experience in managing DSARs under GDPR, CPRA/CCPA, DPDPA, or similar privacy regulations
- Solid understanding of data subject rights, data retention, and privacy compliance requirements
- Excellent stakeholder management, analytical, and communication skills
- Experience with privacy management tools, ticketing systems, and reporting dashboards will be an added advantage
- Certification like CIPPE. CIPM is preferrable

📌 Specialist (Noida)
🏢 EXL
📍 Noida