Monitor and interpret global, federal, and state privacy regulations and assess their applicability to the organization.
· Conduct and support Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs).
· Collaborate with IT, Security, Legal, and business units to ensure privacy by design and default principles are embedded in systems, products, and services.
· Evaluate third-party data processors and vendors for privacy compliance through risk assessments and due diligence.
· Track, investigate, and respond to privacy incidents and breaches, including root cause analysis and regulatory notifications.
· Maintain the Record of Processing Activities (RoPA) and data inventory documentation.
· Develop and deliver privacy training and awareness programs across the organization.
· Assist with audits, assessments, and regulatory inquiries related to data privacy.
· Contribute to the development, review, and implementation of privacy policies, procedures, and governance frameworks.
· Stay current with changes in privacy laws, enforcement actions, and industry trends.
· Other duties as assigned.
Will be supporting the EU/UK region primarily so familiarity with the GDPR is important.