Country Data Privacy Officer (Dpo)

L'Oreal; Milano; In loco; EUR 60.000 - 90.000; Tempo pieno

Descrizione del lavoro

A leading company in beauty and cosmetics is seeking a Country Data Privacy Officer in Milan. This role will oversee compliance with data privacy laws, implement local privacy programs, and liaise with stakeholders. Ideal candidates have expert knowledge in data privacy law and strong project management skills, as well as the ability to influence and manage relationships across diverse teams.

Competenze

• Professional certification in Data Privacy is required.
• Experience working with public authorities is a plus.
• Strong project management experience in multinational contexts.

Mansioni

• Establish and implement the local data privacy program.
• Collaborate with IT Security for compliance.
• Report to management about the data privacy program and risks involved.

Conoscenze

Expert knowledge of Data Privacy law

Project management

Excellent communication skills

Ability to influence stakeholders

Good understanding of IT and Digital challenges

Descrizione del lavoro

The Country Data Privacy Officer (DPO) is responsible for supervising compliance of the Country legal entity with Data Privacy laws and in alignment with Group Data Privacy policies and guidelines.

Reporting Line

• Preferred reporting line to the Country General Counsel (Legal) when a member of the Country Management Committee; otherwise, to the Country General Manager.
• Functional reporting line to the Zone Head of Data Privacy and Group Data Privacy Officer.
• No reporting line to Digital, Marketing, HR, IT, or IT Security functions to avoid conflicts of interest.

Tasks and Duties

1. Establish, drive, and implement the data privacy program locally.
2. Define, inform, and advise on data privacy matters.
3. Collaborate with IT Security to ensure appropriate security measures are implemented.
4. Adapt standard data privacy contractual clauses and processes with consumers, customers, and suppliers.
5. Engage with key local stakeholders (e.g., Legal, IT, Digital, Marketing, HR).
6. Identify and facilitate a Data Privacy Network of Data Privacy champions.
7. Liaise and coordinate with HDP Zone, Group DPO, and other Data Privacy stakeholders.
8. Report regularly to the Country Management Committee on the Data Privacy program, regulatory developments, and risk exposure.
9. Provide operational guidance and monitor documentation of processing activities, including maintaining registers.
10. Cooperate with the Data Protection Authority and serve as its main contact.
11. Advise on notifications to be filed with Data Protection Authorities.
12. Review and negotiate Data Privacy contractual clauses with customers and providers.
13. Assess internal projects for data privacy compliance and provide recommendations, including conducting privacy impact assessments.
14. Handle personal data in coordination with relevant functions and Zone HDP / Group DPO.
15. Raise internal awareness through training programs and internal communications, organize events like "Privacy Days."
16. Stay updated on Data Privacy developments by participating in conferences and training.

Required Skills

• Expert knowledge of Data Privacy law, regulations, and practices (professional certification required).
• Good understanding of IT and Digital challenges and business stakes.
• Experience working with public authorities.
• Strong project management skills.
• Excellent communication skills for multinational environments.
• Ability to influence stakeholders and manage relationships.