- Sound understanding of DPDP Act, 2023 and applicable Rules.
- Understanding of privacy principles including data inventory, data flows, consent, Data Principal rights, retention, deletion, PIA, DPIA and breach management.
- Knowledge of ISO 27001, ISO 27701 and other privacy/ security frameworks.
- Understanding of Privacy tools and their use in DPDP compliance. 6
Job Responsibilities
- Drive the end-to-end DPDP compliance and implementation program across L&T; group companies.
- Ensure policies, processes, controls and actionable implementation requirements are rolled out to meet DPDP obligations 3. Coordinate with Business stakeholders for implementation of DPDP rollout.
- Drive implementation of key DPDP requirements including data inventory/ RoPA, privacy notices, consent, Data Principal rights, DPIA, retention/deletion,
breach management and third-party privacy compliance.
- Drive selection and rollout of Privacy required to operationalize DPDP compliance.
- Review and challenge vendor deliverables and ensure quality, timelines and regulatory alignment.
- Drive UAT, go-live and implementation of privacy solutions across L&T; group companies.
- Monitor changes in DPDP Rules/ regulatory guidance and assess impact on the organization.
- Drive rollout of security safeguards (encryption, masking etc) as per regulatory and business requirements 10. Ensure adequate evidence and documentation is maintained to demonstrate compliance.
- Support internal/ external audits