Zainab P. Oguntoye

• Support the Senior Advisor, Data Protection & Privacy, in implementing and maintaining the organization’s privacy program. • Conduct hands-on activities in data discovery, classification, and automated data mapping to ensure accurate records of processing activities. • Provide operational support for OneTrust, particularly in data mapping and data subject request automation. • Assist in data retention and deletion initiatives, including coordinating with data custodians and managing hardcopy records destruction. • Contribute to building a privacy-first culture by developing and supporting privacy training and awareness programs across the organization. • Ensure privacy practices align with Safe Food for Canadians Regulations (SFCR), Global Food Safety Initiative (GFSI), and Good Warehouse/Driver Practices (GWP/GDP). • Participate in other privacy-related projects and duties as assigned.

• Maintained a leading edge by conducting research and analysis on information and privacy trends applicable to the business, providing expert guidance and strategic recommendations to the organization. • Proactively identify and address potential privacy risks in draft contracts, SOPs, and agreements, provide guidance on privacy by design for operational & technical controls & business projects, ensuring adherence to relevant requirements. • Efficiently and securely process data access requests, adhering to PIPEDA requirements and internal privacy standards, to minimize risk and ensure clients receive protected files containing their information within 30 days. • Lead privacy impact assessments (PIAs) across projects, identifying and mitigating privacy risks that enhance regulatory compliance and safeguard sensitive data, reducing potential privacy incidents by 35%. • Manage responses to privacy incidents and breaches, such as carrying out investigations, documentation, and notifications of such breaches and incidents. • Facilitate large-scale implementation and remediation efforts with consultations with different business units on how to implement security controls that will aid in the protection and privacy of data. • Oversee the monitoring of the regulatory landscape and key legislation likely to impact clients and advise on mitigation plans to ensure accurate business protection. • Review risk management controls and provide insights to improve and encourage compliance with internal systems, processes, and policies. • Advise on privacy and data protection-related inquiries from a wide range of stakeholders within the company and provided practical advice consistent with the company’s risk tolerance.

• Established and managed incident response protocols for data breaches and privacy-related incidents, including investigations, documentations, and notification processes, ensuring timely reporting and resolution in compliance with key regulatory requirements. • Executed comprehensive data mapping initiatives, systematically documenting and categorizing client and employee data, strengthening data governance, and ensuring compliance with data protection regulations. • Led Data Protection Impact Assessments (DPIAs) and Privacy Impact Assessments (PIAs), proactively identifying and mitigating risks, reducing compliance gaps and enhancing the security of sensitive information. • Reviewed and updated privacy policies and procedures, aligning the firm with evolving legal standards and best practices, resulting in improved compliance readiness and reduced regulatory risks. • Acted as the primary liaison with the Nigeria Data Protection Commission (NDPC) and the Nigerian Bar Association (NBA), driving policy updates and ensuring the firm’s seamless adaptation to regulatory changes in data protection. • Identified potential areas of compliance vulnerability and developed or implemented corrective action plan for resolution of problematic issues and provided general guidance on how to avoid or deal with similar situations in the future. • Designed and delivered 15+ interactive training sessions for over 30+ product & project managers, heads of departments, covering topics including Data Protection Impact Assessments, and Privacy by Design training while serving as a key privacy advisor to enhance compliance awareness.

• Drafted, negotiated, and reviewed a wide range of contracts, including employment agreements for real estate sales teams, contracts of sale, deeds of assignment, NDAs, leases, wills and closing documents, ensuring legal soundness and risk mitigation. • Provided in-depth legal research and advisory services on business transactions, commercial disputes, and regulatory obligations, equipping clients with strategic legal opinions to navigate risks and liabilities effectively. • Managed and maintained statutory records, including registers of directors, shareholders, charges, debenture holders, and minute books, ensuring corporate compliance and governance best practice. • Oversaw corporate compliance with industry regulations and professional standards, mitigating legal risks while maintaining corporate and public communication strategies to uphold the company’s reputation and integrity. • Conducted due diligence investigations at land registries, probate offices, and corporate affairs commissions, assessing title validity, monitoring financial transactions, and ensuring regulatory compliance in real estate and corporate dealings. • Designed and strengthened compliance frameworks, integrating robust controls to enhance efficiency, mitigate risks, and ensure seamless alignment with organizational strategies. • Enabled exceptional collaboration among cross-functional colleagues by establishing a safe and productive environment fueled by open communication and intentional relationship building.

• Drafted and reviewed over 100 agreements and contracts, including contracts of sale, deeds of assignment, non-disclosure agreements, and investment agreements, ensuing risk mitigation and regulatory compliance. • Led legal investigations at the Federal Inland Revenue Services, uncovering tax compliance gaps that saved clients approximately 30% in potential liabilities. • Successfully represented corporate and individual clients in corporate and commercial litigation before the High courts in Nigeria. • Facilitated over 300 client meetings, providing administrative support, drafting legal contracts, and preparing business correspondence. Advised clients on investments, enterprise incorporation, tax requirements, and expatriate quota acquisitions, streamlining compliance and business operations. • Collaborated with legal teams to provide expert opinions on immigration and employment matters include advising a foreign charitable organization on establishing a non-governmental organization in Nigeria, ensuring compliance with local regulations and corporate governance standards. • Conducted extensive legal research and due diligence, drafting legal opinions that guided decision-making on complex legal issues. • Provided corporate secretarial services, registering over 50 companies, business names, and NGOs and ensuring timely regulatory filings with the Corporate Affairs Commission.