Dipanjan Dey

Data Protection Officer @ HDB Financial Services Ltd.

About

I have over 14 years of experience in the information technology industry, with a focus on data privacy and protection. I am currently working as a Data Privacy Manager at L&T Technology Services, a global leader in engineering and R&D services. I assist the Chief Risk Officer and the Data Protection Officer in managing global data privacy compliance across 16 countries, following various laws and regulations such as GDPR, CCPA, and the Indian DPDP Act. As a DCPLA certified professional, I have in-depth knowledge and skills in data protection law, data privacy law, and business law. I have conducted several gap analyses, created RoPA, DFD, and PII inventories for all processes, and supported delivery teams during customer and third-party audits. I have also managed anti-bribery and anti-corruption risks, established third-party due diligence, and drafted and negotiated data processing agreements. I am passionate about creating a privacy-compliant environment within the organization and protecting the personal data of our customers, employees, and partners.

Country

India

City

Mumbai

Industry

Legal Services

Skill

ISO 27001 Lead Auditor, AI Governance, Artificial Intelligence Governance, Cybersecurity, Artificial Intelligence (AI), Data Subject Rights Management, Contract Drafting, OneTrust, DORA, Data Privacy Law, Data Privacy Best Practices, Data Privacy Risk Management, Data Privacy , Contract Law, Breach Of Contract, Contract Writing, Business Law, International Business Law, Antu bribery, Anti-Money Laundering

Experience

Data Protection Officer

HDB Financial Services Ltd.

2024-11 - Present · 1 yr 11 mos

Mumbai Metropolitan Region

Senior Associate - Complaince Officer - Privacy

TIAA Global Capabilities

2023-12 - 2024-11 · 1 yr

Mumbai, Maharashtra, India

Data Privacy Manager

L&T Technology Services

2022-3 - 2023-12 · 1 yr 10 mos

Mumbai, Maharashtra, India

Working as data privacy manager assisting the Chief Risk Officer and Data Protection Officer of LTTS in managing global data privacy compliances related to GDPR, CCPA, Indian DPDP Act. This includes centrally managing and coordinating with LTTS centers located across 16 countries and implementation of privacy program and governance. Conducted several gap analysis on data privacy, created RoPA, DFD and PII inventories for all processes. I developed and implemented a comprehensive privacy policy for the company, including data retention periods and procedures to address customer inquiries regarding their personal information. I have supported delivery teams during customer and third-party privacy audits and conducted third-party privacy due-diligence, internal and external privacy audits. Regulatory compliances: Completed C-TPAT assessment and Anti-bribery program implementation within LTTS. Contract drafting and negotiation: I am specialized in drafting and negotiation of IT contracts, information security clauses, data processing agreements, clauses on export control compliances.

Associate Manager - Legal Counsel - DPO Lead

Syngene International Limited

2020-2 - 2022-3 · 2 yrs 2 mos

Data Privacy Worked as DPO Lead assisting the Data Protection Officer of Syngene. Managed global data privacy compliances related to GDPR, CCPA, India , drafting and execution of organization’s policies on Data Privacy, Data Retention, Data Breach, conducting awareness training on Data Privacy, drafting, execution and negotiation of Data Processing Agreements with vendors and clients, conducting Data Privacy Risk Assessments (DPIA) within organization, providing advice to the organization on privacy during COVID, preparing and executing specific consent documents (Employee Consent, Visitor Consent). Anti-bribery Managing Anti-bribery risks for Syngene, drafting Anti-bribery policy, conducting Anti-bribery due diligence of vendors, conducting training session on anti-bribery. Achievements: Implemented data privacy compliances within the organization, drafted data privacy policy and other related policies. I prepared data privacy training modules and awareness programs for the employees. Won the quarterly spot award for taking up new initiatives for data privacy and anti-bribery.