Job Description - Data Privacy Professional

Role Objective: To support the implementation and operation of the company's data privacy program by assisting with privacy compliance, privacy risk management, and privacy governance activities across business operations, clinical studies, digital health solutions, and medical device initiatives. Help ensure compliance with applicable privacy laws and regulations, including GDPR and India's DPDPA, through the execution of privacy assessments, data subject rights processes, data breach response activities, records management, and privacy-by-design reviews.

Key Responsibilities

• Execute day-to-day privacy activities, identify and escalate privacy risks, provide practical guidance to stakeholders, and help embed privacy-by-design principles into products, services, and business processes within the MedTech environment.
• Serve as the point of contact for business and functional stakeholders for DP related questions and address them effectively and promptly.
• Collaborate with businesses and functions to ensure data protection and privacy initiatives are well understood and accurately documented in the Healthineers Data Privacy (HDP) Register.
• Support business in completing Record of Processing Activities (ROPA), perform periodic reviews to ensure standard quality.
• Completing the annual Data Privacy Assessment on behalf of relevant functions, performing spot checks where required.
• Driving fact finding in in case of a data privacy incident and help support in data breach management process.
• Supports in Vendor DP audits and certifications as appropriate, as well as vendor assessments and third-party reviews to ensure data protection across the supply chain.

• Act as bridge between business/function and Data Privacy Officer/Co-ordinator to ensure compliance with data privacy.  
• Assist and Data Privacy Officer/Co-ordinator on day-to-day privacy matters, guidance on data privacy agreements or implementation of data privacy compliance framework, data protection awareness and in responding to data protection and privacy-related queries.

• Review existing policies, processes, systems, controls, and training materials to identify areas where data protection practices can be improved.

Key Attributes & Competencies

• Working and practical knowledge/experience of data privacy operations, data protection compliance policy & programmes and their implementation. 
• Advanced understanding of data lifecycle management and privacy by design principles within IT systems and cloud environments.

• Excellent communication skill with ability to effectively collaborate with multiple cross functional teams   

Qualifications & Experience