Strong working knowledge of the DPDP Act, 2023, applicable Rules, GDPR and other relevant privacy regulations.
Hands-on experience in implementing enterprise-wide privacy compliance and governance frameworks.
Expertise in Data Flow Mapping (DFD), Records of Processing Activities (RoPA), Privacy Impact Assessments (PIA/DPIA) and Personal Data Inventory.
Experience in consent management, Data Principal Rights Request (DPR/DSR) handling, privacy notices and children's data protection.
Knowledge of third-party privacy assessments, Data Processing Agreements (DPA), contractual privacy clauses and vendor risk management.
Understanding of personal data breach management, incident response, regulatory notifications and corrective action tracking.
Experience in data discovery, classification, retention, anonymisation and secure deletion practices.
Ability to conduct privacy gap assessments, audits, training and awareness programs, and management reporting.
Strong stakeholder management skills to drive privacy compliance across multiple business entities and functions.
Familiarity with privacy technology platforms, data governance tools and integration with information security controls.
