Data Protection Officer-1

If you are good at:

➢Legal expertise: In depth knowledge of GDPP/ GDPR and local relevant data protection legislation, guidance and decision-making practise of local Supervisory Authority.

➢Risk/IT/Operations: Experience in assessing risk and best practices mitigation. Knowledge and good understanding of ING’s operational processes. Next to that knowledge of IT and security standards

➢Cultural/global: Interpersonal flexibility and ability to effectively communicate with business functions on different levels of the organisation (COO’s, CDO’s, Tribe leads, Process owners/ Asset owners, Risk legal, IT, etc), Organisational sensitivity

➢Communication and negotiation skills : being able to act on all levels within the organization, an activity for which excellent communication skills are required. Next to that a DPO has to be capable to stand up and defend the DPO advice

➢Business oriented: ability to understand the business needs in order to address properly and proficiently the initiatives both from the regulatory and business point of view

➢Self-starter/Board level: Able to fulfil the role autonomously➢Common touch/teaching: Able to speak to clients, handle requests/ complaints and train others to assist data subjects and correctly apply privacy principle in their daily activity

➢Credibility including dealing with conflicts properly

Tasks:

➢ Inform and advise the controller or processor and employees about the obligations pursuant to the GDPR (the GDPR requirements are translated in the GDPP Framework and supplemented by local laws if applicable)

➢ Monitoring compliance with the GDPR, local laws and policies of the controller or processor in relation to the protection of personal data, including the assignment of responsibilities, awareness-raising and training of staff

➢ Provide advise where requested as regards the DPIA and monitor its performance

➢ Act as the contact point for the supervisory authority on issues related to processing, including the prior consultation referred to in Article 36 GDPR