Specialist
EXL · IT Services & Consulting
- Noida, Uttar Pradesh, India
- On-site
- Posted about a month ago
About the job
Manage end-to-end Data Subject Rights Request (DSAR) operations across global privacy regulations, ensuring timely, accurate, and compliant fulfillment of individual rights requests while driving process efficiency, quality, and stakeholder engagement.
Manage end-to-end processing of DSARs, including access, deletion, correction, portability, opt-out, restriction, and consent withdrawal requests
Assess request validity, identity verification requirements, and applicable legal exemptions
Coordinate with Legal, IT, HR, Business Teams etc. to gather and review responsive data
Ensure compliance with regulatory timelines under GDPR, UK GDPR, CPRA/CCPA, DPDPA, and other applicable laws
Draft and issue DSAR responses and maintain complete case documentation after review
Handle escalations, complex cases, and requests submitted by authorized agents, privacy brokers, or legal representatives
Track DSAR volumes, SLAs, aging, and operational metrics; provide periodic management reporting
Support audits, regulatory inquiries, and compliance reviews related to data subject rights
Identify opportunities for automation and process improvements to enhance DSAR efficiency and quality
Develop and maintain DSAR procedures, playbooks, and knowledge repositories
4-7 years of experience in Privacy, Compliance or Data Governance
Prior experience in managing DSARs under GDPR, CPRA/CCPA, DPDPA, or similar privacy regulations
Strong understanding of data subject rights, data retention, and privacy compliance requirements
Excellent stakeholder management, analytical, and communication skills
Experience with privacy management tools, ticketing systems, and reporting dashboards will be an added advantage
Certification like CIPPE. CIPM is preferrable