Manage end-to-end Data Subject Rights Request (DSAR) operations across global privacy regulations, ensuring timely, accurate, and compliant fulfillment of individual rights requests while driving process efficiency, quality, and stakeholder engagement.
Responsibilities
Manage end-to-end processing of DSARs, including access, deletion, correction, portability, opt-out, restriction, and consent withdrawal requests
Assess request validity, identity verification requirements, and applicable legal exemptions
Coordinate with Legal, IT, HR, Business Teams etc. to gather and review responsive data
Ensure compliance with regulatory timelines under GDPR, UK GDPR, CPRA/CCPA, DPDPA, and other applicable laws
Draft and issue DSAR responses and maintain complete case documentation after review
Handle escalations, complex cases, and requests submitted by authorized agents, privacy brokers, or legal representatives
Track DSAR volumes, SLAs, aging, and operational metrics; provide periodic management reporting
Support audits, regulatory inquiries,



and compliance reviews related to data subject rights
Identify opportunities for automation and process improvements to enhance DSAR efficiency and quality
Develop and maintain DSAR procedures, playbooks, and knowledge repositories
Qualifications
4-7 years of experience in Privacy, Compliance or Data Governance
Prior experience in managing DSARs under GDPR, CPRA/CCPA, DPDPA, or similar privacy regulations
Robust understanding of data subject rights, data retention, and privacy compliance requirements
Excellent stakeholder management, analytical, and communication skills
Experience with privacy management tools, ticketing systems, and reporting dashboards will be an added advantage
Certification like CIPPE. CIPM is preferrable

EXL (NASDAQ: EXLS) is a leading data analytics and digital operations and solutions company. We partner with clients using a data and AI-led approach to reinvent business models, drive better business outcomes and un

📌 Specialist (Noida)
🏢 EXL
📍 Noida