- Identify risks and also plan and implement the risk mitigation plans
- Lead the data breach handling process for effective addresal of privacy related gaps (if any) reported, in the current process & systems.
- Manage the process related to personal data access requests from individuals.
- Assess subcontracting/outsourcing of any processing of personally identifiable information and recommend privacy related controls (including inclusion of appropriate clauses in the vendor contract.
- Liaison with external Privacy and Data Protection Counsel for expert views and audits.
- Identify and implement internal initiatives on Data Privacy.
- Partner with the product development team in the development of current products (including cloud based) and recommend privacy related features/controls, in summary Privacy by Design.
- Lead and collaborate in the formulation of policies related to collection and processing of personally identifiable information, based on the Privacy & Data Protection Laws of the countries in which the company operates or would like to expand its operations.
- Implement and monitor the data privacy policies and associated processes across functions and business units.
- Proactively partner with functional groups (HR, CAG, CCD, Facilities,…) to ensure that the adoption of new technologies, processes, services and solutions are compliant with the applicable data privacy regulations
- Assess the development & enhancements of internal processes & systems and recommend privacy related controls.
- Conduct employee awareness on lawful handling of personally identifiable information, as part of their work.