We are seeking a knowledgeable and proactive DPO Consultant with proven experience in the automotive sector to support data protection and privacy compliance across the organization. The ideal candidate will have in-depth understanding of GDPR, ISO 27001, and industry-specific regulations, and will play a critical role in ensuring that all personal and sensitive data handled throughout the vehicle lifecycle, connected car platforms, and OEM operations comply with data protection laws.
Key Responsibilities:
Act as an independent advisor on all matters relating to data protection and privacy in the organization.
Ensure compliance with the General Data Protection Regulation (GDPR) and other applicable data protection regulations (e.g., Polish DPA, ePrivacy, etc.).
Monitor data handling across systems used in connected vehicles, telematics, R&D, and customer data platforms.
Perform regular data protection impact assessments (DPIAs) and advise on high-risk processing activities.
Oversee and support the privacy-by-design and by-default principles during product and process development (e.g., infotainment systems, driver data, vehicle diagnostics).
Liaise with cross-functional teams (Legal, R&D, IT, HR, Marketing) to ensure compliant practices.
Provide training and awareness sessions for staff and suppliers on data privacy obligations.
Maintain records of processing activities (ROPAs) and prepare documentation for potential audits or data subject requests.
Advise on data breach responses and work with cybersecurity teams on incident management protocols.
Coordinate with external stakeholders, including regulatory authorities and partner OEMs, on data compliance matters.
Requirements:Proven experience as a DPO or Privacy Consultant, preferably in the automotive, mobility, or manufacturing sectors.
Deep knowledge of GDPR, national data protection laws, and EU regulatory frameworks.
Experience working with OEMs, Tier 1 suppliers, or mobility service platforms is a strong advantage.
Familiarity with automotive IT systems, cloud infrastructure, connected vehicle data, and supply chain data flows.
Certifications such as CIPP/E, CIPM, or ISO/IEC 27701 are highly preferred.
Fluent in English; Polish
