Preston Sterling

Function

Privacy Officer

Responsibilities

  • Determining the legal bases and purposes for business processes.
  • Indicating whether business processes constitute cross-border transfers and the controls needed when that's the case.
  • Determining the Controller, Joint-Controllers, Processors and Third-Parties for business processes.
  • Determining whether a DPIA/PIA is required.
  • Helping John Fisher execute DPIA/PIA.
  • Reviewing and assessing whether or not the DPIA/PIA has been correctly completed and whether its conclusions (whether or not to go ahead with the processing and which safeguards to apply) are in compliance with the GDPR/CCPA.
  • Managing data sharing agreements and other privacy controls.
  • Mapping data categories and data subject categories to the logical data model.
  • Planning remediation actions to address outstanding risks detected during assessments or data breaches.
  • Setting up the risk and control register, along with Dora Portman and Cis Souchek.
  • Setting up third-party privacy profiles.

Skills and expertise