Local Privacy Officer Italy

Job Title: Local Privacy Officer ItalyLocation: Milano, ItalyAbout the jobAs a Local Privacy Officer (LPO), you will be a strategic business partner responsible for protecting data subjects rights and freedoms, enabling data-driven innovation within Sanofi and maximizing business opportunities. You will lead the implementation of the Privacy operating model, balancing robust data protection with business growth opportunities in an increasingly complex privacy landscape. This role requires you to address critical privacy risk areas, implement privacy maturity at all levels of the company, generate trust and transparency while enabling the business to deliver according to its objectives.
Acting as a force of proposal you'll have to proactively contribute to a robust data governance while having a thoughtful risk-based approach. You will manage local privacy initiatives while contributing to global and regional projects, ensuring compliance with evolving privacy regulations and championing privacy-by-design principles in an increasingly AI-driven environment.
Key AccountabilityPrevent Privacy RisksDevelop and maintain a comprehensive local privacy risk assessment framework that addresses business maturity and ownership, and promotes the effective implementation of the privacy operating model among leadership team members and key stakeholdersUnderstand, map and become familiar with business strategy and activities to proactively support their deployment while mitigating privacy risksAppoint and lead the Local Privacy champions' network to implement in a proactive way privacy strategy and prioritiesMonitor and analyze local privacy regulations, AI regulatory developments, and enforcement trends and document & implement local variations of global procedures when required by local lawsContribute to global position papers, develop and maintain external network with public authorities and other privacy networks, represent Sanofi in industry advocacy efforts to enhance transparency and build trust with internal and external stakeholdersActively contribute to transformation initiatives impacting both the business the privacy operating modelImplement privacy-by-design principles in both local and global projects, with a focus on emerging technologies, innovation, data security and data democratizationIn accordance with the Global Privacy maturity framework, provide periodic reports to map existing and emerging privacy risksProvide periodic reports to the Italy Leadership Team to map existing and emerging privacy risks, in accordance with the Global Privacy maturity frameworkAdapt global privacy templates and procedures to local requirements while maintaining consistency, including vendor management due diligence, oversight and monitoringMonitor and assess data sovereignty regulatory developments across jurisdictions relevant to Italy, including cross-border transfer requirements, and escalate identified risks to the relevant governance bodiesImplement and promote Data Sovereignty by Design principles in local and regional projects, ensuring that data sovereignty risk screening is integrated into business transition and transformation design processes, in alignment with the Data Compass framework and the data transfer compliance routesMonitor and analyze AI regulatory developments, including the EU AI Act, and their intersection with data protection law (GDPR), to proactively identify and mitigate privacy risks arising from AI systems, automated decision-making (ADM), and profiling activities deployed locally or globally impacting data subjects in ItalyIntegrate AI and ADM risk considerations into the local privacy risk assessment framework, ensuring that high-risk AI systems and profiling activities are subject to appropriate Data Protection Impact Assessments (DPIAs) and, where required, prior consultation with the Garante per la protezione dei dati personaliProtect Fundamental Rights and Sanofi's InterestsOversee the mapping and maintenance of local personal data processing activities, and ensuring transparency and effectiveness in data handling practicesPerform, review and validate accuracy of local privacy, assets and vendors assessments to protect individual rights and freedoms and to protect Sanofi's liability, reputation and license to operateManage data subject rights requests and personal data breaches promptly and effectively to maintain trust and prevent business issues and disruptionsDevelop and deliver targeted privacy training and awareness programs to increase business maturity and ownership of relevant stakeholders and staffProactive escalation of privacy risks to the relevant governing bodies to incorporate new developments and expectations in both privacy operating model and business operationsServe as the primary liaison with local Data Supervisory Authorities, demonstrating business maturity in privacy complianceCoordinate privacy audits and dawn raid responses, ensuring data security measures are