Data Privacy Steward

Company description

Within Publicis Groupe’s Intelligent Creativity business, we specialize in bringing creative ideas to life, and to consumers. By combining 100 years of craft excellence with 6,000 experts across 52 locations of the world’s biggest studio network, we leverage the industry’s richest data, through the power of agentic AI, to radically redefine content production with Intelligent Content. We intuitively deliver this through Marcel Make, the world’s first Intelligent Content agent.

The result? Predictively performing content that unlocks business growth in unprecedented ways. No more guesswork. No more waste. Just content that works, working a lot harder.

The Data Privacy Steward is responsible for supporting the data privacy program activities established by the Global Data Privacy Office (GDPO) and executed through the Global Data Privacy Operations (GDPOps) team. This role leads core data privacy activities within their agency and reports on key metrics to track program status and progress. The position requires coordination across all levels of the business, including (but not limited to) Client Services, Practice teams, and Finance.

The Data Privacy Steward works closely with the GDPOps team and the Data Privacy Program Lead. While this role reports to an agency leader, all work is functionally directed and overseen by the VP, Data Privacy Operations.

• Ensure the Data Privacy Steward appointment is formally announced across the agency.
• Serve as the primary point of contact for all privacy-related questions and issues.
• Support the Data Subject Access Request (DSAR) process—ensuring requests reach the correct departments, searches are completed, and findings are reported. Where applicable, ensure fulfillment of data subject rights (deletion, rectification, etc.).
• Attend all GDPOps-scheduled Data Privacy Steward meetings and contribute to discussions.
• Assist in coordinating local privacy training in partnership with GDPO and GDPOps.

• Support client-facing teams by ensuring timely responses to privacy-related inquiries following the Engagement Workflow.
• Coordinate resolution of client concerns—including questionnaires, assessments, audits,and informal questions—working with GDPOps, GDPO, GSO, and relevant business teams.
• Advocate for the agency’s needs to ensure teams can serve clients effectively and efficiently.

• Complete and maintain the client and services roster using the approved template,updating it as new clients onboard or transition out.
• Train Data Inventory respondents (with GDPOps support) to ensure readiness.
• Serve as the primary contact for respondent questions, addressing issues directly and escalating to GDPOps as needed.
• Track Data Inventory progress and escalation to appropriate leadership. Proprietary Product Due Diligence
• Maintain an up-to-date roster of proprietary products and product owners.
• Ensure all proprietary products undergo required data privacy compliance assessments.
• Facilitate additional privacy and security reviews when necessary, including Data Privacy Impact Assessments (DPIAs).
• Submit completed DPIAs to GDPO for review and support the implementation of recommended actions.
• Promote Privacy-by-Design practices in product development and records retention.

• Using Personal Data Inventory submissions, maintain a list of all vendors processing personal data and requiring Vendor Due Diligence.
• Gather and maintain vendor contact information.
• Provide vendor details to GDPOps for assessment deployment and follow up with nonresponsive vendors as requested.
• For in-scope vendors, coordinate with GSO to ensure required security reviews are completed.