Job Summary The Data Privacy Analyst supports the daily administration of Consumer Cellular's privacy program under the direction of the VP, Data Privacy. This is a hands-on role for an analytical, motivated professional who will help build, document and maintain privacy controls across the company, support privacy reviews of new products, services and vendors, and help manage consumer privacy rights.
Duties and Responsibilities - Monitor new and changing federal and state privacy laws and regulations relevant to the telecommunications industry, including the CCPA (as amended by the CPRA), other state comprehensive privacy laws, and rules on customer proprietary network information (CPNI), and summarize their impact.
- Process consumer and employee privacy rights requests in a timely and compliant manner, including verification, response and recordkeeping.
- Assist in maintaining data inventories, data maps and the record of processing activities, working with business units and information technology to document data flows.
- Conduct initial privacy reviews of vendors and other third parties, gather facts from business owners and vendors, and prepare findings for review. Contract and data processing terms are routed to Legal.
- Assist with privacy assessments, including privacy impact assessments, regulatory risk assessments and reviews of artificial intelligence and automated decision-making, and track conditions to closure.
- Support cookie and consent operations for websites and mobile applications, including tag and SDK categorization and testing.
- Support marketing privacy operations, including consent and opt-out requests for calls, texts and email, and opt-outs for sale, sharing and targeted advertising.
- Gather facts for contact center privacy reviews, including call recordings and outsourced call center vendors.
- Help keep privacy communications and rights processes clear for older customers, and support requests involving caregivers, authorized users and trusted contacts.
- Help stand up privacy for new brands and service lines, including data mapping and launch reviews.
- Assist with records retention and data minimization efforts.
- Help prepare responses to regulator inquiries and escalated customer privacy complaints.
- Assist in creating and delivering privacy training and internal communications, and support the company's privacy champion network.
- Document and support the initial response to privacy incidents, escalating to the VP, Data Privacy and legal counsel as appropriate.
- Prepare program metrics and reports, maintain trackers and documentation, and keep registers current.
- Perform other duties as assigned.
The above statements describe the general nature and level of work performed and are not an exhaustive list of all responsibilities, duties and skills required. All personnel may be required to perform duties outside of their normal responsibilities from time to time, as needed.