Stephen Smith Email & Phone Number

South Africa

Cape Town Area, South Africa

Cape Town, South Africa

Dublin, Ireland

• AVP, EMEA REGIONAL PRIVACY SPECIALIST Data Privacy specialist for 26 countries in the EMEA region. GDPR subject matter expert. Reports to regional and global senior management. Responsibilities include:
• Drafting GDPR compliant policy, procedures, guidance and standards applicable to MetLife controller and processor entities including those relating to: - DPO target operating model; - 3rd party processor assessment and.
• Provision of strategic advice and guidance to business functions (including Legal, IT Security, Data Governance, Risk, Audit, HR, Data Analytics, Marketing and operational functions) in relation to GDPR compliance.
• Delivery of GDPR training and education to global and regional senior management and Board members.
• Preparation of GDPR guidance notes for legal, technical and operational audiences.
• Design of a GDPR compliant monitoring, testing and reporting framework.

Dublin, Ireland

• Developed an enterprise risk management framework for the Group. Designed risk assessments, business continuity and disaster recovery policies and procedures.
• Drafted the Group's data protection policy, privacy and fair processing notices, cookie policy and IT security policy.
• Designed and implemented multi-jurisdictional data transfer framework incorporating model clauses contracts.
• Evaluated contractual obligations to institutional clients in relation to IT risk and data protection practices. Coordinated responses to client enquiries and advised senior management on global trends in client.
• Performance of Privacy Impact Assessments.
• Advised on data protection obligations and risk implications of 3rd party service provider contracts including Cloud Computing, SaaS and debt collection contracts.

Cayman Islands

• Established risk control plan for the management of the Group's exposure to IT and data privacy risk.
• Led a major project to create a global strategy to rationalise and synchronise sources of employee related data held in manifold data stores across the Group in order to reduce data duplication and improve data accuracy.
• Member of the Cayman Islands data protection IT sub-committee advising the main data protection working group on IT related issues relating to the drafting and implementation of data protection legislation in the.

Cayman Islands

• Conducted the architectural design and global deployment of the Group's CRM and direct marketing software. Developed a resource portal with video training materials, guidance and advisory notes.
• Project managed the deployment of the Group's global Intranet portal on SharePoint 2007 and 2010 platforms. Designed the portal architecture and site structure. Worked with developers to implement bespoke web parts.

Bristol, United Kingdom

• Advised the Managing Partner on improvements to the firm’s structure and business processes. Conducted a major overhaul of the firm's IT infrastructure.
• Designed bespoke business application software.

Bristol, Swindon UK

• Founding member of Lawsys Ltd, a computer software design and development company, developing case management software for the legal and insurance sectors.
• Responsible for system design and development, product marketing, software deployment and the provision of consultancy services to senior management of client firms.

Bristol, United Kingdom

Bristol, United Kingdom

Llb Hons, Law

Law Society Final Examinations, Law

Education record