Rukmani Sachdeva
Delhi
Summary
A data privacy and compliance professional with hands-on experience in conducting data privacy assessments, privacy gap assessments, and DPIAs for enterprise tools, platforms, and business initiatives. Supports governance, risk and compliance and cybersecurity functions by reviewing data flows, identifying privacy risks, and assessing third-party and internal applications. Regularly drafts and reviews privacy notices, consent language, and data protection clauses, and supports implementation of privacy controls in line with global data protection requirements and organizational privacy frameworks.
Overview
4
4
years of professional experience
1
1
Certification
Work History
Senior Analyst
Infosys Limited
11.2023 - Current
- Conducted comprehensive data privacy assessments for new tools, platforms, and business initiatives to ensure alignment with global data protection laws and Infosys' privacy framework.
- Performed gap assessments of existing privacy practices to identify compliance issues and recommend improvements in line with GDPR, CCPA, the DPDP Act, and other applicable regulations.
- Led Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs) for new and emerging technologies, including AI-based solutions, by analyzing risks and defining mitigation measures.
- Evaluated data handling, consent requirements, model transparency, and privacy implications of AI-driven processing in reviewed AI use cases and automation workflows.
- Managed privacy-related incidents by coordinating investigations, documenting root causes, and ensuring timely implementation of corrective actions.
- Evaluated data flows, third-party platforms, and vendor engagements to ensure compliance with Infosys' privacy standards and contractual commitments.
- Refined privacy notices, consent language, and data protection clauses for websites and internal tools to enhance compliance for client-facing solutions.
Privacy & Security Consultant
Protiviti India
04.2023 - 11.2023
- Implemented data privacy policies and procedures to ensure compliance with relevant regulations (such as GDPR, CCPA).
- Conducted data privacy impact assessments (DPIAs) for new projects to identify and mitigate privacy risks, enhancing compliance and safeguarding sensitive data.
- Collaborated with legal teams to draft data processing agreements and privacy notices for clients.
- Maintained records of processing activities and updated data mapping and inventory, ensuring accurate tracking of data flows and compliance with regulations.
- Supported integration of privacy controls during design, testing, and deployment phases of new systems, reinforcing privacy by design principles.
- Worked on multiple cybersecurity projects and drafted cybersecurity and Information security policies and procedures for various clients in alignment with ISO 27001 and other relevant standards.
Legal Consultant
Elevate Services
10.2022 - 04.2023
- Reviewed, drafted, and negotiated a variety of commercial contracts to ensure accuracy, clarity, and alignment with client expectations.
- Incorporated appropriate data privacy, confidentiality, and information security requirements into client and vendor agreements.
- Assessed data protection risks by analyzing processing terms, access controls, breach notification clauses, and cross-border data transfer provisions.
- Managed contract redlining, stakeholder discussions, and finalization to ensure that legal, compliance, and privacy requirements were properly addressed.
Data Privacy & Protection Trainee
Tsaaro Academy
03.2022 - 05.2022
- Gained conceptual as well as practical understanding of privacy principles and multiple activities revolving within the privacy domain.
- Studied GDPR in depth to hands on experience in data protection compliance programs, involving data mapping, key considerations internal or external policies, Practical execution of Data protection Impact Assessments (DPIAs) Conducted Privacy assessment and prepared breach notification summary of various states of USA.
- Studied violations of Privacy Laws in Canada and Singapore etc. and privacy laws of Canada, Australia, China, Russia, Japan, UK etc.
Education
LLM - Business and Corporate Law
Symbiosis International University
Pune07-2022
BBA.LL.B. (Hons.) -
Guru Gobind Singh Indraprastha University
Delhi07-2021
Skills
- Data Privacy and Protection
- GDPR Compliance
- Governance, Risk & Compliance
- Contract Drafting
- Cybersecurity
- Corporate Law
- Stakeholder collaboration
Certification
• Data Protection Officer (CTDPO), Tsaaro Academy
• Privacy in Practice, Office of the Australian Information Commissioner
• Privacy Professional Certification, OneTrust
• Privacy Rights Automation Expert Certification, OneTrust
• Privacy Ops Certification, Securiti
• Information Security, Privacy and Data Protection, Enhelion Knowledge Ventures Pvt. Ltd.
• Privacy in Practice, Office of the Australian Information Commissioner
• Privacy Professional Certification, OneTrust
• Privacy Rights Automation Expert Certification, OneTrust
• Privacy Ops Certification, Securiti
• Information Security, Privacy and Data Protection, Enhelion Knowledge Ventures Pvt. Ltd.
Research And Publications
- Issues of Intellectual Property Rights with Digitalization and Rising Usage of Internet, Lex Research Hub Journal on Law and Multidisciplinary Issues, I, IV, 2582-211X
- Critical Study on Trademark Infringement Related to Domain Names and Cybersquatting, Jus Corpus Law Journal, 2, 3, 2582-7820
- Tattoos and Intellectual Property Rights- An Indian Perspective, Manupatra Articles
- Challenging Relationship between Contemporary Art and Intellectual Property Rights, Manupatra Articles
- An Analytical study on Corporate Criminal Liability- Comparative Study of India and USA, International Journal of Law Management and Humanities, V, 1, 2581-5369
- Independent Thought V. Union of India, White Black Legal, 1, 2, 2581-8503
- A Comparative Analysis on the Impact of E-Banking Services on Customer Satisfaction in India and U.K, Brain Booster Articles, 978-1636065946
Timeline
Senior Analyst
Infosys Limited
11.2023 - Current
Privacy & Security Consultant
Protiviti India
04.2023 - 11.2023
Legal Consultant
Elevate Services
10.2022 - 04.2023
Data Privacy & Protection Trainee
Tsaaro Academy
03.2022 - 05.2022
LLM - Business and Corporate Law
Symbiosis International University
BBA.LL.B. (Hons.) -
Guru Gobind Singh Indraprastha University