Role & responsibilities

Data Privacy & DPDP Compliance

- Ensure implementation and continuous monitoring of the organizations data privacy framework.
- Drive compliance with:
- Digital Personal Data Protection (DPDP) Act, 2023
- Applicable privacy and data protection regulations
- Internal privacy governance standards
- Draft, review, and update:
- Privacy policies
- Consent notices
- Data retention policies
- Vendor privacy clauses
- Data processing agreements
- Advise departments on lawful collection, processing, storage, sharing, and retention of personal data.
- Maintain records related to personal data processing and privacy compliance.
- Support privacy impact assessments and privacy-by-design initiatives.
- Coordinate with internal stakeholders for implementation of privacy controls and SOPs.

Grievance Officer Responsibilities

- Act as the designated Grievance Officer under the DPDP Act.
- Handle and resolve grievances raised by Data Principals regarding:
- Consent withdrawal
- Data correction/update requests
- Data erasure requests
- Access requests
- Privacy complaints
- Unauthorized data processing concerns
- Ensure grievances are acknowledged and resolved within prescribed timelines.
- Maintain grievance registers, audit trails, and complaint records.
- Coordinate with Legal, HR, IT, Security, and Operations teams for investigation and closure of complaints.
- Escalate high-risk privacy matters and breaches to senior management.Monthly Compliance & Regulatory Monitoring
- Manage monthly legal and compliance tracking activities.




- Monitor and circulate:
- Government notifications
- Regulatory amendments
- Compliance updates
- Industry advisories relating to privacy and legal compliance
- Prepare periodic compliance reports and dashboards for management.
- Ensure timely filing, documentation, and closure of compliance obligations.Legal & Contractual Support
- Provide legal support on commercial and operational matters.
- Draft, review, and negotiate various agreements.
- Support internal legal documentation and contract management processes.
- Assist in handling notices, disputes, investigations, and regulatory inquiries.
- Coordinate with external legal counsel where required.

Governance & Risk Management

- Develop and strengthen compliance frameworks, SOPs, and governance mechanisms.
- Conduct risk assessments related to privacy and legal exposure.
- Support internal audits and compliance reviews.
- Conduct employee awareness sessions and privacy trainings.
- Assist management in identifying and mitigating regulatory and operational risks.

Preferred candidate profile

Strong understanding of:

- DPDP Act, 2023
- Data privacy principles
- Contract law and compliance management
- Legal drafting and documentation

• Excellent communication and stakeholder management skills

• Solid analytical, investigation, and risk assessment abilities

• Knowledge of cybersecurity and data governance practices

• Ability to manage cross-functional coordination and regulatory compliance activities

📌 Manager-Data Privacy & Grievance Officer (Mumbai Suburban)
🏢 Navneet Education
📍 Mumbai Suburban