Rob Priore, Cipp, Cdpse Email & Phone Number

Waltham, Massachusetts, United States

ZoomInfo is the leading provider of business to business data and go-to-market enablement solutions. Tens of thousands of businesses utilize ZoomInfo technology.In this role I am responsible for overseeing the relationship between the Compliance Department and the Product and Engineering organizations through the planning, prioritization and implementation of Compliance-driven initiatives. I provide advisory and consultative support to these teams in the execution of projects related to policy enforcement and remediation, support for newly enacted laws and regulations, and product compliance.Selected duties:Plan and prioritize privacy and compliance driven initiatives and work with Product and Engineering teams on implementation strategy and execution.Provide consultative support and advocacy to business stakeholders with respect to Privacy by Design best practices.Manage the research and evaluation of the Privacy and Compliance domain tech stack: coordinate with internal stakeholders to facilitate procurement, implementation, onboarding, maintenance and off boarding.Coordinate with counterparts in Legal and Compliance in the creation and communication of compliance requirements associated with new laws and regulations.

• Help company align to evolving US Data Privacy requirements for Privacy Operations, such as data mapping, policies, DSAR operations, consulting, business requirement documentation, web-compliance, training, reporting, auditing, and projects that support Company’s Data Privacy initiatives.Key activities:• Assessed data subject access request processes and identified areas for efficiency improvements. Created business requirement documents for IT implementation that will save the company hundreds of hours of manual work annually by replacing manual DSAR operations work with automated processes. Company approved budget and project is underway.• Assessed company website cookie compliance efforts and identified and remediated compliance gaps. Assigned to lead the implementation of OneTrust for cookie compliance across the company’s North American operations – 15 distinct web properties. Lead OneTrust cookie compliance implementation for Mazda Canada.• Created website audit framework to assess notice, cookie/GPC compliance, etc. Assigned to lead monthly website audits. Assigned to lead audit findings remediation project.

Data privacy contractor for ABM Industries, a global 150,000+ employee Fortune 500 company.• Help marketing, legal, operations, IT, and HR align to EU and US data privacy requirements by conducting gap assessments, DPIA’s, analyzing data processing activities, conducting data flow exercises, producing data handling training documentation, reviewing vendor contracts for privacy requirements, interfacing with internal audit, and leading the effort to align global website data collection activities to GDPR and CPRA.Key activities:• Created and delivered a business requirements report to the Chief Marketing Officer to secure resources for a global cookie compliance initiative. Led the onboarding of OneTrust’s cookie compliance module for twelve company websites: scanned websites, categorized over 400 cookies, created jurisdictionally accurate banners aligned with CPRA and GDPR requirements, created scripts, and tested codes. • Evaluated vendor contracts that process personal data for privacy requirements to help identify vendors that pose processing risks. Provided recommendations like auditing and replacing certain vendors engaged in high-risk processing.• Designed a marketing governance model to assist the BU in aligning to existing and future privacy requirements. Presented to Chief Marketing Officer.• Analyzed and recommended updates to company websites in terms of cookie and targeting code activities, evaluated current privacy notices for data collection activities and drafted updates, reviewed and made updates to data subject access request workflows.• Created a US state privacy regulation report to highlight legislative risk and provide the board of directors with visibility into future compliance initiatives.• Created a CPRA aligned data processing agreement for company service providers.

Greater Boston Area

Designed and implemented sweeping data privacy and data protection programs to help companies align to business requirements and regulatory requirements like the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), etc.• Worked with and advised the leadership of some of the largest financial, industrial, real-estate, and retail organizations in the world.• Designed and leveraged control libraries combining regulatory frameworks like NIST and HIPAA to assess an organizations information security and privacy posture.• Performed dozens of privacy and information security assessments and created roadmaps for companies to better align to requirements.• Performed extensive data flow mapping and records of processing activities reporting.• Created information security and privacy training modules. Delivered training to hundreds of managers and executives.• Created internal and external information security and privacy policies and notices aligning to GDPR, CPRA, NYDFS, etc.• Managed teams of diverse professionals and inspired a strong work ethic and commitment to shared goals.

Greater Boston Area