Provide Compliance Advice: Offer timely, clear, and practical legal guidance to business units on domestic and international data privacy laws and regulations (e.g., GDPR, CCPA, PIPL).
Review and Draft Documents: Review and draft data processing-related contracts, agreements, privacy policies, cookie notices, data processing agreements (DPAs), and cross-border data transfer documents.
Support Products and Services: Participate in the development of new products, features, or services, conduct privacy impact assessments (PIAs), and identify/mitigate data privacy compliance risks.
Handle Data Subject Requests: Assist in establishing processes and guide the handling of data subject rights requests (e.g., access, deletion, correction).
Training and Awareness: Deliver training to employees on data privacy laws, regulations, and internal policies to enhance company-wide privacy awareness.
Monitor Regulatory Developments: Track global data privacy regulatory updates and enforcement trends, assess their impact on the company, and propose actionable recommendations.
Incident Response and Advisory: Support data breach incident response and regulatory inquiries.
