Data Protection Officer

Job Description

Establish the Division Data Protection Office. Support Group data protection initiatives and the Group Data Protection Office. Develop, implement, and enforce Group and Division data protection policies and processes. Manage data protection breaches, queries, and complaints in accordance with regulatory requirements. Liaise with regulatory authorities. Providing internal stakeholders advisory on data protection matters (e.g. projects, contracts, disputes, queries, communications). Keep abreast of and monitor developments in Data Protection Law and other areas of law that impact data protection. Create and maintain personal data-related databases, inventories, and registers. Ensure policies and processes comply with law. Develop and review policies to handle personal data in electronic and non-electronic forms. Develop and review processes for handling breaches, queries, complaints and rights requests. Engage internal and external stakeholders on data protection processes and policies. Develop and deliver initiatives to foster a data protection culture among internal and external stakeholders. Perform data protection audits. Conduct data protection risk assessment and develop mitigation strategies. Apprise Division Senior Management and the Group Data Protection Office of data protection matters such as incident reporting and risk management initiatives. Work with Group Risk Management function to mitigate risks (e.g. insurance). Obtain and maintain professional accreditation as required by law. Conduct training, seminar, workshops, and education and awareness campaigns for the Division. Develop data protection collateral and corporate communication material for the Division. Any other functional works as may be assigned from time to time