Bhavya Mehrotra

As a data privacy specialist, I have

• Conducted multiple Privacy Impact Assessments to identify and mitigate privacy risks associated with new projects, technologies and business processes;
• Reviewed various Asset Discovery Questionnaires to identify data assets and map data flows within the organization;
• Performed the Data Privacy Risk Assessment to review the data flow architecture, conduct desktop audits to assess compliance with data protection policies, procedures and regulations and highlight the risks involved in processing;
• Managed and executed Data Subject Requests in compliance with applicable privacy laws(e.g. GDPR, CCPA, etc.);
• Conducted detailed review of standard contractual clauses to ensure its compliance with relevant data protection regulations along with updating and maintaining them in accordance with changes in laws and regulations;

My core responsibilities involved are mentioned below:

• Proactively track and monitor the GDPR compliance status of the organization's customers and vendors;
• Develop and maintain a comprehensive compliance dashboard or reporting system to provide ongoing visibility into compliance efforts;
• Review and evaluate Data Protection Agreements like MSAs, RFPs, License Agreements, etc. with customers, vendors, and other third parties to ensure alignment with global and local data privacy laws and company policies;
• Conduct transfer impact assessments for cross-border data transfers to identify and mitigate risks associated with international data flows;
• Analyse and update Standard Contractual Clauses (SCCs) to ensure they reflect the latest regulatory requirements and best practices.