DPO

Job Title: Data Privacy Officer /Global Data Privacy Officer
Company : Bajaj Auto Limited
Location : Pune
Reporting to : General Counsel/Chief Digital Information Officer
The Data Privacy Officer (DPO) is responsible for developing, implementing, and overseeing the Bajaj Auto’s global privacy and data protection program . The role will ensure compliance with applicable privacy laws and regulations across India and all jurisdictions where the company and its subsidiaries operate. The DPO will have the primary responsibility to advice on privacy matters, manage privacy risks balancing the support to business growth initiatives and act as a key liaison with regulators, customers, employees, and internal /external stakeholders world wide
Responsibilities :
Privacy Governance Strategy
Develop and maintain organization’s global privacy framework, policies, standards, and procedures.
Establish privacy governance structures including consent management system in India and international subsidiaries
Lead the design and implementation of privacy-by-design and privacy -by-default principles.
Monitor emerging privacy laws and regulatory developments in India and globally.
Advice the Data Privacy Steering Committee of Bajaj Auto on privacy risks and periodically update compliance status.
Regulatory Compliance
Ensure compliance with (a) Digital Personal Data Protection Act, 2023 (India) (b) General Data Protection Regulation (EU/EEA) (c) Privacy regulations in applicable jurisdictions where Bajaj Auto or its subsidiaries operate.
Maintain records of processing activities.
Manage data subject rights processes and regulatory reporting obligations.
Coordinate response to regulatory inquires and investigations.
Oversight on Global Subsidiaries
Lead the Privacy activities as the central SPOC for all global subsidiaries
Implement privacy framework and requirements by partnering with local legal, compliance, HR, Digitech and business teams.
Establish privacy champions within the overseas entities.
Conduct periodic compliance reviews and maturity assessments.
Data Protection Impact Assessments
Lead Privacy Impact Assessment (PIAs) and Data Protection Impact Assessments (DPIAs)
Review new products, technologies and business initiatives for privacy implications.
Cross – Border Data Transfers
Develop frameworks for international data transfers.
Review and approve transfer mechanisms and contractual safeguards.
Assess Vendor and subsidiary data sharing arrangements.
Monitor localization and transfer requirements across jurisdictions
Vendor & Third-Party Risk Management