Data Privacy Professional

Job Description - Data Privacy Professional

Role Objective: To support the implementation and operation of the company's data privacy program by assisting with privacy compliance, privacy risk management, and privacy governance activities across business operations, clinical studies, digital health solutions, and medical device initiatives. Help ensure compliance with applicable privacy laws and regulations, including GDPR and India's DPDPA, through execution of privacy assessments, data subject rights processes, data breach response activities, data processing record management, and privacy-by-design reviews.

Key Responsibilities:

• Execute day-to-day privacy activities, identify and escalate privacy risks, provide practical guidance to stakeholders, and help embed privacy-by-design principles into products, services, and business processes within the MedTech environment.
• Serve as the point of contact for business and functional stakeholders for DP related questions and address them effectively and promptly.
• Collaborate with businesses and functions to ensure data protection and privacy initiatives are well understood and accurately documented in the Healthineers Data Privacy (HDP) Register.
• Support business in completing Record of Processing Activities (ROPA), perform periodic reviews to ensure standard quality.
• Completing annual Data Privacy Assessment on behalf of relevant functions, performing spot checks where required.
• Driving fact finding in case of a data privacy incident and help support in data breach management process.
• Supports Vendor DP assessment, audits, and certifications as appropriate to ensure data protection across the supply chain.
• Act as bridge between business / function and Data Privacy Officer / Co-ordinator to ensure compliance with data privacy.
• Assist Data Privacy Officer/Co-ordinator on day-to-day privacy matters, guidance on data privacy agreements or implementation of data privacy compliance framework, data protection awareness and in responding to data protection and privacy-related queries.
• Review existing policies, processes, systems, controls, and training materials to identify areas where data protection practices can be improved.
  
  

• Working and practical knowledge/experience of data privacy operations, data protection compliance policy & programmes and their implementation.
• Advanced understanding of data lifecycle management and privacy by design principles within IT systems and cloud environments.
• Excellent communication skill with ability to effectively collaborate with multiple cross functional teams
  
  

• Degree in Computer Science, Information Technology or related fields. Legal training or qualifications or Data privacy certifications such as DCPP, CIPP, CIPM will be an added advantage.
• 5-8 years of post-qualification experience with min. 4 years in data privacy or protection functions preferably in Medtech, Pharma, LifeScience or IT/ITES Companies.