Local Privacy Officer- Algeria

About the job Job purpose: As the Local Privacy Officer (LPO) for Algeria , the incumbent serves as the primary point of contact and accountability for all data privacy matters within Sanofi Algeria. The role ensures full compliance with Algerian data protection legislation — including obligations and the main point of contact under the national data protection authority ANPDP (Autorité Nationale de Protection des Données à Caractère Personnel) — as well as alignment with Sanofi's global privacy framework, policies, and standards. Beyond the core country mandate, this position carries an extended scope covering one or more of the following areas: Africa MCO (Multi-Country Organization), Global Health Unit (GHU) , Global Privacy initiatives , or designated International Region countries. In this capacity, the role acts as a trusted privacy business partner across a broader geography, supporting regional governance, multi-country programs, and global workstreams under the direction of the Africa MCO Data Privacy Officer. The Local Privacy Officer is a key promoter of a culture that prioritizes the protection of personal information. Acting as a strategic business partner accountable for assessing, mitigating, and independently monitoring the privacy risks within their respective Markets/clusters, the role enables data-driven opportunities while maintaining a responsible, ethical, and compliant approach to personal data management. Key accountability: Core – Algeria Local Privacy Officer Serve as the formally designated Local Privacy Officer (LPO) for Sanofi Algeria, acting as the primary interface between the local affiliate and the Africa MCO Data Privacy Officer, the Global Privacy Office, and the Algerian data protection authority (ANPDP). Maintain, update, and govern the Records of Processing Activities (RoPA) for all personal data processing operations conducted by Sanofi Algeria, ensuring accuracy, completeness, and alignment with global standards. Appoint and manage a network of Privacy Champions (point of contacts) within the relevant local departments; Chair the Local Privacy Working Group consisting of appointed Privacy Champions. Through this working Group, design, secure sponsorship and deliver the Local action plan for Privacy; Actively contribute to Privacy Transformation Working Groups where appointed, cascade action plans to Privacy Champions where needed; Actively monitor local privacy regulations/enforcements, and implement local adaptations of global procedures when required by local laws; Contribute to internal position papers, represent Sanofi in industry advocacy efforts (trade associations); Report Program and Operations KPIs through the Global Privacy dashboard; In accordance with the Global Privacy reporting framework, produce a yearly activity report and present it to the Country chair and local business operations; Lead and coordinate Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs) for local business projects, digital initiatives, clinical activities, and HR processes, ensuring risks are identified, assessed, and mitigated appropriately. Provide proactive privacy advisory to local business functions including Commercial, Medical, HR, Legal, IT, and Digital teams on data privacy obligations, new regulatory developments, and best practices. Manage and coordinate data subject requests (right of access, rectification, erasure, portability, objection) in accordance with applicable Algerian law and Sanofi's global procedures, ensuring timely and compliant responses. Oversee the data breach management process for Algeria, including detection, internal escalation, documentation, and regulatory notification to ANPDP where required, in coordination with the Africa MCO DPO and Global Privacy team. Serve as the primary liaison with the ANPDP , managing regulatory filings, declarations, prior authorizations, and any formal correspondence or inspections. For local projects, ensure assessment processes are respected: Promote and champion the usage of the Privacy Checklist by the Business to ensure Privacy-By-Design principles are implemented within projects; Review & validate Personal Data Protection Assessments (PDPA) in Onetrust; When relevant, review and validate Study Compliance Forms or other relevant study questionnaires; Document local variations from global processes and procedures; Ensure that local registrations/filings with competent data protection authorities are completed; For Global projects, partner with the BU/GF Privacy Officer in ensuring local practices or regulations are considered at the early stage of design, escalating showstoppers, and offering local resolutions; Actively contribute to Sanofi Global Privacy Training strategy in ensuring Materials designed centrally are fit for purpose, review translations and establish the relevant priority audience. Design, coordinate, and track the delivery of local privacy training and awareness programs , ensuring all relevant employees and contractors are appropriately informed of their data privacy obligations. Support the review, negotiation, and execution of Data Processing Agreements (DPAs) and conduct third-party vendor privacy assessments to ensure compliant data sharing and processing arrangements. Monitor the Algerian data protection regulatory landscape , proactively identifying legislative changes and assessing their impact on Sanofi's operations, and escalating material risks to the Africa MCO DPO. Maintain and report on local privacy compliance metrics and KPIs , contributing to regional and global governance reporting cycles. Ensure the proper implementation of Sanofi's global privacy policies, standards, and procedures at the local level, adapting them to local legal requirements where necessary. Partner with Sanofi Auditors for the planning and execution of internal audits; Manage data protection dawn raids in accordance with GPO dawn-raid procedure and local requirements; Extended Scope – Africa MCO / Global Health Unit / Global Privacy / International Region • Support the Africa MCO Data Privacy Officer in coordinating and overseeing privacy activities across the MCO, including multi-country project reviews, regional risk assessments, compliance monitoring, and governance reporting. • Support Global Health Unit initiatives and projects, coordinating and overseeing privacy activities, including multi-country project reviews, regional risk assessments, compliance monitoring, and governance reporting. • Contribute actively to Global Privacy programs and workstreams , including the development and rollout of global policies, privacy tooling (e.g., OneTrust), consent management frameworks, and cross-functional compliance initiatives. • Act as Privacy Business Partner for additional International Region countries as assigned. • Participate in and contribute to the Global Privacy Network , s