EXL

Analyzes business data and runs outsourced operations

Privacy Specialist

Privacy & Data ProtectionConfirmed live in the last 24 hours

Full-timeNoida, Uttar Pradesh, IndiaNo salary listedIn-person

About the Job

Requirements

4-7 years of experience in Privacy, Compliance, or Data Governance.
Prior experience managing Data Subject Rights Requests under GDPR, CPRA/CCPA, DPDPA, or similar privacy regulations.
Strong understanding of data subject rights, data retention, and privacy compliance requirements.
Experience with privacy management tools, ticketing systems, and reporting dashboards is an added advantage.
A certification such as CIPPE is required or expected; CIPM is preferred.

Responsibilities

Manage end-to-end Data Subject Rights Request operations across global privacy regulations, ensuring timely, accurate, and compliant fulfillment while driving process efficiency, quality, and stakeholder engagement.
Manage end-to-end processing of Data Subject Rights Requests, including access, deletion, correction, portability, opt-out, restriction, and consent withdrawal requests.
Assess request validity, identity verification requirements, and applicable legal exemptions.
Coordinate with Legal, Information Technology, Human Resources, and business teams to gather and review responsive data.
Ensure compliance with regulatory timelines under GDPR, UK GDPR, CPRA/CCPA, DPDPA, and other applicable laws.
Draft and issue Data Subject Rights Request responses and maintain complete case documentation after review.
Handle escalations, complex cases, and requests submitted by authorized agents, privacy brokers, or legal representatives.
Track Data Subject Rights Request volumes, service-level agreements, aging, and operational metrics, and provide periodic management reporting.
Support audits, regulatory inquiries, and compliance reviews related to data subject rights.
Identify opportunities for automation and process improvements to enhance Data Subject Rights Request efficiency and quality.
Develop and maintain Data Subject Rights Request procedures, playbooks, and knowledge repositories.

Desired Qualifications

Strong stakeholder management, analytical, and communication skills.
CIPM certification.
Experience with privacy management tools, ticketing systems, and reporting dashboards.

Manage end-to-end Data Subject Rights Request (DSAR) operations across global privacy regulations, ensuring timely, accurate, and compliant fulfillment of individual rights requests while driving process efficiency, quality, and stakeholder engagement.

4-7 years of experience in Privacy, Compliance or Data Governance
Prior experience in managing DSARs under GDPR, CPRA/CCPA, DPDPA, or similar privacy regulations
Strong understanding of data subject rights, data retention, and privacy compliance requirements
Excellent stakeholder management, analytical, and communication skills
Experience with privacy management tools, ticketing systems, and reporting dashboards will be an added advantage
Certification like CIPPE. CIPM is preferrable

Manage end-to-end processing of DSARs, including access, deletion, correction, portability, opt-out, restriction, and consent withdrawal requests
Assess request validity, identity verification requirements, and applicable legal exemptions
Coordinate with Legal, IT, HR, Business Teams etc. to gather and review responsive data
Ensure compliance with regulatory timelines under GDPR, UK GDPR, CPRA/CCPA, DPDPA, and other applicable laws
Draft and issue DSAR responses and maintain complete case documentation after review
Handle escalations, complex cases, and requests submitted by authorized agents, privacy brokers, or legal representatives
Track DSAR volumes, SLAs, aging, and operational metrics; provide periodic management reporting
Support audits, regulatory inquiries, and compliance reviews related to data subject rights
Identify opportunities for automation and process improvements to enhance DSAR efficiency and quality
Develop and maintain DSAR procedures, playbooks, and knowledge repositories

About the Company

EXL

Analyzes business data and runs outsourced operations

EXL analyzes business data and runs outsourced operations for insurers, healthcare payers, banks, retailers, and other large organizations. Its teams combine industry expertise with data engineering and AI to handle tasks such as claims processing, payment reviews, customer service, and finance within existing technology environments. The company also builds software, including LifePRO, which manages insurance policies, and EXLdata.ai, which connects fragmented data for use in AI systems. Clients pay for consulting projects, ongoing managed services, and software delivered through the cloud. EXL was founded in 1999 and is headquartered in New York City.

Company size: 10,001+
Company stage: IPO
Headquarters: New York City, New York
Founded: 1999

Recently Posted Jobs

Explore more opportunities at EXL

See more jobs