HOW WILL YOU MAKE AN IMPACT?

Responsibilities

To act as a coordinator between the main Group functions to support the operationalisation of data protection and privacy responsibilities. The four key projects that require coordination are:

• Records of Processing Activity: To assist with the Group’s data mapping project for the Records of Processing Activity (ROPA) to include all global/local systems and unstructured data. This will require regularly updating the Group and Maison-specific ROPA(s) and collaborating with key business stakeholders to ensure that data privacy requirements are met. As part of this, you will be required to understand regulatory requirements and coordinate with key internal legal, technology and risk management departments across the Group and its Maisons.
• Impact Assessments: To support, define, update, and implement Data Protection Impact Assessments (DPIAs), Legitimate Interest Assessments (LIAs) and Transfer Impact Assessments (TIAs). You will assist in the enhancement of the existing processes, including validation of the assessments and implementation steps required for the maintenance of the Records of Processing Activity.
• Data Subject Requests: To handle timely responses to data subject requests (e.g. data erasure, data access) and maintain compliance documentation at a Group level. To assist the Group Digital Legal team coordinating responsibilities between the various stakeholders dealing with data subject requests and defining global procedures and guidelines.
• Data Retention: Coordinating the analysis of data retention periods and implementing the operational processes to ensure that storage limitation principles are complied with in data processing activities.

In addition, to support the Group Platforms, Digital & Privacy team on legal & regulatory matters.

Other Responsibilities

• Play a key role in guiding and reinforcing the Group’s Platforms, Digital & Privacy strategy. You will work closely with the Maison teams and the wider Richemont Group, including the Luxury New Retail/e-commerce, Group Technology, Group Data, Group Security, Human Resources, marketing, digital and communications teams (both at Group and Maison level).
• Bring confidence and creativity to this position, along with the ability to work independently in a team-oriented environment.
• Provide timely and results-oriented advice and support on a wide variety of matters across all lines of business to the Maison and Richemont teams in relation to platforms and online compliance, digital and privacy on a global scale.
• Respond to ad hoc queries to include identification, analysis and evaluation of risks in order to provide appropriate legal solutions, including regulatory compliance.
• Support the monitoring and management of compliance risks re: legal, regulatory, preparation of and adherence to Group policies, procedures, etc. and ensure regular use of and contribution to Group Legal’s knowledge management including remaining current on applicable legislation.
• Work in close cooperation with a variety of technical and non-technical internal and external stakeholders, including Richemont Functions, Regions and Maison business teams across the Group, and liaise with and manage external counsel.
• Draft, review and contribute to Group Legal memos, guidelines, business rules, processes, where needed in close collaboration with Group Maisons, Functions and/or Regions and the central Group Legal Team.
• Assist with global data privacy-related topics, including those related to AI and blockchain.
• Get involved in, contribute to, project-manage – as the case may be – Legal Operations-related projects in line with the agenda set by the Group General Counsel, the Chief Counsel, Richemont and Regions and the Legal Leadership Team.
• Develop and show a strong understanding of and adherence to the Richemont Group values and focus on the ways of working, i.e. “the How” things are done to live up to these values.
• Support in the development and delivery of training initiatives for internal teams on global privacy requirements, best practice and internal policies.
• Support on response to data privacy incidents, root-cause analysis, and drafting responses to clients and regulators where appropriate.