Data Privacy Officer

Real is a fast-growing national real estate brokerage powered by technology. Real is currently operating in all U.S. states, Canada, and the District of Columbia. Founded in 2014, Real is a trailblazer in the Residential Real Estate industry, as we lead the disruption with our cutting-edge technology platform. We are on a mission to revolutionize the home-buying and selling process, making agents' lives better while creating lucrative financial opportunities for them.

For more information, visit https://www.onereal.com/

Job Summary:

As a Data Privacy Officer, you will utilize business knowledge in combination with skills to monitor, detect, identify, analyze, evaluate, report and assist in the response of data privacy and protection. The candidate will collaborate closely with cross-functional teams, including marketing and IT to implement our data protection framework by design and default. Expertise in privacy regulations and ability to interpret and apply them to our data processing and marketing practices will be essential in mitigating risks and maintaining our executive stakeholders’ and consumers' trust.

Duties/Responsibilities:

• Lead the development of privacy and data protection strategies, ensuring compliance with global privacy regulations like GDPR, CCPA, and other pertinent data privacy laws, with a keen understanding of financial data security and privacy requirements

• Utilize business knowledge in combination with practice skills to monitor, detect, identify, analyze, evaluate, report and assist in the response of data privacy and protection

• Collaborate closely with cross-functional teams, including marketing and legal to implement our data protection framework by design and default

• Expertise in privacy regulations and ability to interpret and apply them to our data processing and marketing practices will be essential in mitigating risks and maintaining our executive stakeholders’ and consumers' trust

• Stay up-to-date with privacy regulations, including but not limited to CPRA, VCDPA, CPA, CTDPA, UCPA and other relevant laws and guidelines

• Process Data Subject Access Requests (DSARs) to Fulfill DSAR requirements and to ensure our company stays compliant

• Provide DSAR training by showing our practical roadmap for dealing with consumer privacy requests from beginning to end, and meeting deadline(s) as required by law

• Prepare monthly and Y-O-Y DSAR reports

• Maintain and update DSAR response templates as needed upon approval

• Analyze monthly communication preferences’ updates and trends

• Develop and maintain a comprehensive understanding of online and offline marketing practices, and their implications for data privacy

• Collaborate with marketing and IT teams to ensure that privacy requests, communications consent, cookie consent mechanisms, and opt-out options are implemented correctly and in compliance with privacy regulations

• Provide guidance and training to internal stakeholders, including marketing and development teams, on privacy regulations and best practices

• Monitor industry trends, regulatory changes, and emerging best practices related to data privacy and provide recommendations for adjustments to our practices and policies

• Prepare and maintain documentation, including policies, procedures, and records of compliance activities, to demonstrate our commitment to privacy compliance

• Conduct data protection impact assessments on existing applications, new applications and enhancements

• Review and update risk assessments as warranted on how applications, vendors, and third-party service providers collect, process, and protect personal data

• Maintain the Privacy Risk Register

• Fulfill additional, relevant, tasks appropriate to the role and business demands

• Assist in product integration and enhance business value where necessary

Required Skills/Abilities: 

• Understanding of encryption mechanisms (data at rest and transit)

• Excellent analytical skills with the ability to interpret complex regulations and apply them to practical scenarios

• Detail-oriented and proactive approach to identify risks, gaps, and areas for improvement in privacy compliance

• Effective communication skills, both written and verbal, with the ability to articulate privacy-related concepts to diverse stakeholders

• Ability to work independently as well as collaboratively in a cross-functional team environment and manage multiple projects concurrently

• Familia