Data Protection Officer

Job Description – Data Protection Officer (DPO)

Role Purpose

The Data Protection Officer (DPO) is responsible for ensuring compliance with the Digital Personal Data Protection (DPDP) Act, 2023, by overseeing lawful, secure, and transparent processing of digital personal data across the organization. The DPO acts as the primary point of contact for data protection matters with regulators, data principals, and internal stakeholders.

Key Responsibilities

Ensure compliance with the DPDP Act, 2023 and other applicable data protection laws.

Oversee lawful processing of personal data, ensuring accuracy, relevance, and purpose limitation

Review and approve privacy notices and consent mechanisms.

Ensure effective handling of Data Principal rights and grievance redressal within statutory timelines.

Act as escalation authority for unresolved data protection grievances.

Oversee identification, assessment, and notification of personal data breaches to regulators and affected individuals.

Conduct and review Data Protection Impact Assessments (DPIAs) for high-risk processing activities.

Monitor third-party and vendor compliance with data protection requirements.

Ensure data retention, deletion, and anonymization practices align with legal and regulatory obligations.

Maintain audit-ready records including processing activities, consents, breaches, and grievances.

Lead data protection awareness and training programs and promote a privacy-by-design culture.

Key Skills & Competencies

Strong understanding of the DPDP Act, 2023 and data protection principles.

Knowledge of privacy governance, risk assessment, and incident management.

Ability to work independently and provide unbiased advice to management.

Strong communication and stakeholder management skills.

Experience coordinating with IT, Legal, Compliance, and Information Security teams.

Qualifications & Experience

Bachelor’s degree in Law, IT, Information Security, Risk Management, or a related field.

Relevant experience in data protection, privacy, compliance, or information security.

Certifications such as DPO, CIPP/E, CIPP/A or DCPP similar are preferred.

Compensation

Competitive compensation as per market standards, aligned with experience in data protection, regulatory compliance, and DPDP Act implementation.

Best-in-class remuneration for candidates with prior DPO or privacy leadership experience.