Job Description

Job Summary:
The Data Protection Officer (DPO) is responsible for ensuring the organization's compliance with data protection laws (such as GDPR, CCPA, LGPD, or other relevant regulations). The DPO will oversee data privacy policies, conduct audits, provide training, and act as the primary contact for data protection authorities and individuals whose data is processed.
Key Responsibilities:
1. Compliance & Legal Oversight:

• Ensure compliance with GDPR, CCPA, and other applicable data protection laws.
• Monitor changes in privacy regulations and update company policies accordingly.
• Conduct Data Protection Impact Assessments (DPIAs) and maintain records of processing activities (ROPAs).
• Serve as the main point of contact for data protection authorities (e.g., ICO, CNIL) and individuals regarding data privacy inquiries or breaches.

2. Policy Development & Implementation:

• Develop, implement, and maintain data protection policies, procedures, and guidelines.
• Ensure proper data mapping, classification, and retention policies are in place.
• Collaborate with IT and security teams to implement privacy-by-design and default principles.

3. Training & Awareness:

• Conduct employee training on data protection laws, policies, and best practices.
• Raise awareness across the organization about data privacy risks and responsibilities.

4. Risk Management & Incident Response:

• Identify and mitigate data privacy risks through regular audits and assessments.
• Lead the response to data breaches, including notifications to authorities and affected individuals when required.
• Work with IT security teams to ensure secure data handling and storage.