Glawdys Jose

• - Maintaining a comprehensive register of data processing activities up-to-date (ROPA) ;

• - Managing privacy & security risk assessments (PIAs) including in AI projects & IT Systems such as DLP ;

• - Advising key stakeholders on the interpretation and application of data protection and cybersecurity regulations such as DORA, NIS 2, ISO 27001 and AI Act etc.… ;

• - Acting as a person of contact for employees and Supervisory Authorities ;

• - Drafting, updating and reviewing internal and external privacy policies, procedures and guidelines ;

• - Leading investigations and responses to data breaches and security incidents ;

• - Conducting privacy and security third-party vendor assessments ;

• - Responding to data subjects rights requests and information requests.

• - Ensuring compliance of the record of processing of activities (ROPA) ;

• - Managing related privacy impact assessments e.g DPIA, TIA, LIA to identify and mitigate any risks ;

• - Analysing and responding to data subjects requests e.g subject access request (DSAR), deletion (RTBF) ;

• - Providing analytical support by drafting internal and external policies, guidelines, internal processes ;

• - Monitoring proactively and reporting (inter)national legal, regulatory and industry relevant initiative to key stakeholders ;

• - Acting as a person of contact for employees and Supervisory Authorities (such as the CNIL and the Belgian DPA) ;

• - Leading investigations and coordinating responses to data breaches and security incidents ;

• - Creating and delivering proactively data protection trainings to employees to raise awareness.

Legal counsel

• - Drafting, negotiating and reviewing commercial and IT contracts (customers and suppliers)

• - Monitoring and communicating to key stakeholders legal and regulatory developments affecting Arval's business ;

• - Providing legal advice related to .insurance distribution, consumer law, Anti-Money Laundering & combating the financing of terrorism (AML/CFT), anti-bribery…) ;

• - Providing legal assistance and operationalizing the company GDPR compliance program ;

• - Drafting and negotiating data protection agreements (DPAs) and other relevant contractual provisions related to privacy ;

• - Drafting terms and conditions and policies related to mobility related projects, products and services.