About AstraZeneca

AstraZeneca is a global, science-led, patient-focused biopharmaceutical company that focuses on the discovery, development and commercialization of prescription medicines for some of the world’s most responsible diseases. But we’re more than one of the world’s leading pharmaceutical companies.

Data Protection Officer

The Data Protection Officer in India should meet global privacy expectations while addressing India’s specific regulatory

landscape, notably the Digital Personal Data Protection Act, 2023 (DPDP Act) and DPDP Rules, sectoral regulations, and

cross-border operations, including working knowledge of GDPR. The Data Protection Officer combines legal, technical, and

governance expertise to design, implement, and oversee privacy programs.

The role reports to the Area Compliance Director Asia Area.

Typical Accountabilities
Function as the company’s Data Protection Officer
Practical understanding of the DPDP Act, 2023 and applicable DPDP Rules
Hands-on experience with DPDP-aligned operational artefacts (DFDs, processing inventories,



consent records, purpose
mapping)
Robust understanding of the personal data lifecycle under DPDP (collection, use, storage, sharing, retention, erasure)
Experience handling cross-border transfer of personal data in line with DPDP requirements
Ability to translate DPDP compliance requirements into transparent, business-focused guidance
Working understanding of “reasonable security safeguards” and organisational controls under DPDP
Experience managing data processors and vendors in line with DPDP obligations
Capability to assess, document, and manage personal data breaches and notifications under DPDP
Independent judgment to advise management and identify DPDP compliance risks
Ability to design, implement, and scale DPDP governance frameworks across the organisation
Work closely with the Compliance Manager and ensure that robust governance, processes and systems are in place
Maintain professio

📌 Data Protection Officer Mumbai
🏢 AstraZeneca
📍 Mumbai