Job Description
The selected Data Privacy Manager will advise on privacy policies, procedures, processes, and programme to manage and minimise the privacy risk to the organisation. Continuously review compliance to global privacy regulations and enhance privacy practices. Provide support on and manage data breach incidents. Support Manager Data Privacy with strategic projects to ensure privacy principles are incorporated. Co-ordinate with the Privacy Contracts Advisor to ensure contractual compliance and advise on risk mitigation.
In this role, you will:
- Advise on privacy requirements for business projects through identifying and evaluating the organisations data processing activities and drive privacy by design at all levels. Act as a trusted advisor on the creation and maintenance of a personal data inventory and designing with the organisation proper systems of control over personal data and advise on Data Subject Rights Requests (DSRRs), data privacy incidents and supporting the organisation in conducting Data Protection Impact Assessments (DPIAs) whilst ensuring that any regulatory updates or industry trends are brought to the table.
- Provide insights and guidance to a network of `Business Privacy Leads (BPLs) and act as a point of escalation for risks and issues raised by them on data privacy. Develop and implement necessary projects to minimise data privacy risk and provide advice. Ensure that any written information on the organisations obligations relating to data privacy (such as privacy notices and contractual clauses) is available for provision to customers, employees, temporary staff, contractors and third parties. Ensure that such information is modified in line with changes to data privacy laws. In addition, develop a process to support the organisation in complying with consent requirements such as gathering appropriate consent for marketing, cookie compliance on websites and maintaining an up-to-date privacy policy for customers and staff.
- Ensure the smooth running of the Privacy Operations through advising and supporting relevant DPO resources regarding data subject rights requests as well as advising on the creation and maintenance of records of processing operations (ROPA).
- Provide advice to all employees, temporary staff and contractors related to their roles and responsibilities with regard to data privacy laws and good practice. Provide advisory services for business units and projects and conduct negotiations with external stakeholders. Where required liaise with external counsel(s) to ensure compliance with privacy laws.
- Monitoring regulatory updates and industry trends and maintain an up-to-date knowledge of data privacy laws, guidance and industry trends as it affects the management of data privacy risk. Understand the impact of these on the organisation and inform the stakeholders where changes are needed. Evaluate necessary policy and procedure changes, according to business need, legislation or regulatory changes. Develop or advise on the development of new policies and/or best practice to manage risk.
- Support the organisation in maintaining an awareness of its obligations to comply with data privacy laws, within all departments area of responsibilities and identify training requirements on privacy compliance for employees.