Put in all compliance documentation and trained users, review and training is on-going sporadically

Provided advice and guidance then designed a tailored framework and methodology for solving identified issues quickly. Designed a tailored and automated ROPA, having first detailed all data elements that SFC uses for processing personal data. Categorized these for ease of ROPA implementation, then provided:- WP 29 Best practice designed documentation that included breach (formula) reporting; included the identification of all associated legislation that affect retention, including archiving… Show more Provided advice and guidance then designed a tailored framework and methodology for solving identified issues quickly. Designed a tailored and automated ROPA, having first detailed all data elements that SFC uses for processing personal data. Categorized these for ease of ROPA implementation, then provided:- WP 29 Best practice designed documentation that included breach (formula) reporting; included the identification of all associated legislation that affect retention, including archiving for SRO.- DPIAs with risk assessment upgrades for accuracy and compliance- Multi-User DSA legal contract - Multi-User DSA policy adjustments- Documented and provided preventative FOI requests advice- Data Retention with deletion (and identification for Scottish Records Office (SRO) archiving)- Appropriate Policy document for Article 9 data- ROPA. Designed an automated multi-data entry into a single cell from a drop-down menu to provide rigour and consistent ‘click’ data entry (using VB). Show less

Put in all documentation for DPA compliance, trained users in all aspects.

Wrote White paper on AI and data privacy for Intl US corporation

Supported DPO in their compliance Journey

Data Privacy by 'design and default' Input to EU, UK and US data processing systems. Used 'Split Processing and Sequential Processing to minimize risk for sensitive data in-flight and at-rest to all regions; this also resulted in lowering the overhead for compliance documentation (TIAs, SCCs).

Managed data privacy across 29 departments, designed and supported bespoke documentation for compliance and used this analysis phase to appoint an HOP in each department; and ensured dept. specific training was complete; won on-going compliance with minimum overheads, time and costs to effect Data Privacy self-sufficiency.

Processing health data in real time. In addition to normal DPO duties, worked with large corporates to ensure their BCRs were fully supported and they were comfortable with all data privacy aspects of our systems. Won compliance, wrote manual for data privacy relevant to their industry sector so they could manage DPrivacy internal and externally with ease, efficiency run by a DPO with less management experience and knowledge.

Data privacy analyst, trainer and implementer winning compliance for almost 50 SMEs across a wide range of industry sectors.