Data & Privacy Manager

We are seeking a highly motivated Data Privacy Manager to join our North American Coloplast team to work on cutting edge data issues in the medical device/supply industry. This position will be based in Minneapolis and will provide subject matter expertise on a wide range of data and privacy matters. This role requires 5+ years of direct experience with a focus on complex data and privacy-related matters.

You will also be a member of our Global Business Ethics & Compliance team, where you will work with compliance colleagues from around the world in designing and aligning our global and local activities. In the role, you will have a dotted reporting line to the Group Data Protection Officer and be actively involved in ensuring that our Data Privacy program is truly global in its framework and ways of working

Major Areas of Accountability

• Supports the Compliance Officer and Global Data Protection Officer, respectively, in strengthening Coloplast’s compliance and global data protection efforts.
• Maintain and drive improvement of the regional data privacy efforts, in line with and as part of Coloplast’s global data privacy program.
• Assist Business Ethics & Compliance team members in advising senior leadership on data privacy matters.
• Monitor, assess and communicate relevant data privacy developments in the region tactically and strategically aligned with the Global Data Protection Officer and Global Data Privacy program model
• Provide guidance, assessments, training, and monitoring of data privacy efforts within Coloplast business units as per defined maturity models to measure program adaption and effectiveness.
• Manage regional privacy governance metrics and data collection to support global privacy program audits.
• Manage regional data subject access requests, data privacy incidents, and internal and external complaints, including procedure maintenance, documentation, and escalation to DPO on reporting requirements.
• Manage Record of Processing Activities (ROPAs) and data inventories for region (processing activities, systems, vendors, data flows) to keep global records accurate within our Data Privacy system OneTrust.
• Support Legal in their assessment, determinations related to legal basis of data processing, consent requirements, and record retention requirements.
• Contribute and coordinate with Information Security on risk analysis and risk management plans.
• Provide guidance on implementation of administrative safeguards and data access/processing controls.
• Negotiate and provide guidance on data provisions contained in advertising, marketing and commercial agreements, including BAAs, data protection agreements and data privacy provisions.
• Coloplast employees are required to conduct business to the highest ethical and professional standards; comply with applicable laws and regulations, the AdvaMed Code of Ethics on Interactions with Healthcare Professionals, and company policies.
• Other job duties as assigned

Basic Qualifications

• A Bachelor’s degree with a minimum of 3 years professional experience in data protection compliance with a legal, compliance, risk management, audit or consulting background and a strong interest in business metrics and operations.
• Demonstrated subject matter expertise in U.S. and Canada data privacy requirements including U.S. Federal and State privacy laws, HIPAA, CCPA, and PIPEDA.
• Experience advising on data privacy compliance efforts, including the organization and coordination of privacy assessments, corporate policies and processes.
• Knowledge of IT, web, and mobile ecosystems and their privacy and data use implications and risks.
• Ability to coordinate, manage, and lead small to medium size projects with multiple stakeholders
• Ability to advise on complex compliance matters
• Ability to maintain strong working relationships with demanding internal and external clients.
• Excellent time management skills with the ability to prioritize and multitask and work under shifting deadlines in a fast-paced environment.
• Ability to work independently and in a team environment with both the local and global Compliance and Legal teams and the information security teams.
• Excellent written and verbal communication skills.