Timi Shotade

Role Summary: providing comprehensive support to organizations operating in the Kingdom of Saudi Arabia (KSA) to ensure full compliance with the Personal Data Protection Law (PDPL).

Key Responsibilities:

• GAP and Compliance Assessments
• Privacy System Assessments
• Data Subject Rights Implementation
• Data Discovery and Personal Data Mapping
• Privacy Management Tools Specialist

Project Summary: Data Privacy Compliance for a Global Energy & Chemicals Leader. Led a strategic data privacy initiative for one of the world's largest integrated energy and chemicals companies, supporting their alignment with the Saudi Personal Data Protection Law (PDPL).

Key Responsibilities:

• Designed a comprehensive Data Subject Rights (DSR) process tailored to PDPL requirements.
• Evaluated five leading data privacy management platforms, assessing functionality, Scalability, and regulatory alignment.
• Shortlisted top solutions and conducted a proof of concept (PoC) to validate the most suitable tool for the client's needs.

Benefits Delivered:

• Successfully executed the PoC, demonstrating real-world applicability and integration potential.
• Delivered a detailed tool selection report to senior stakeholders, including comparative analysis of shortlisted tools, use case alignment, key findings and strategic recommendations.

Project Summary: PDPL Compliance for a Leading B2B Cybersecurity Firm. Led a data privacy compliance initiative for a prominent cybersecurity company in Saudi Arabia

Key Responsibilities

• Conducted a detailed Gap Assessment to identify areas of noncompliance.
• Led the development of the Record of Processing Activities (RoPA) in accordance with PDPL standards.
• Delivered both basic and advanced data privacy training sessions to internal teams, enhancing organizational awareness and capability.
• Designed and implemented a custom Data Subject Rights (DSR) solution, enabling the firm to efficiently manage and respond to individual rights requests.

Benefits Delivered:

• Successfully deployed a DSR framework that empowers the organization to fulfill access, correction and deletion requests in compliance with PDPL.
• Identified and documented consent collection points across the organization, enabling better visibility and control over consent management.

Project Summary: PDPL Compliance for a Leading Islamic Bank in Saudi Arabia. Supported the largest Islamic bank in the Kingdom of Saudi Arabia in enhancing its compliance with PDPL with a focus on Data Subject Rights (DSR) and Consent Management

Key Responsibilities:

• Designed a comprehensive Data Subject Rights (DSR) process, including detailed documentation to guide internal teams on managing and responding to individual rights requests in line with PDPL requirements.

Benefits Delivered:

• Delivered a complete set of DSR request and response forms covering access, rectification and deletion requests.
• Developed a Data Subject Rights Handbook tailored for customer service teams, enabling consistent and compliant handling of privacy related inquiries

Project Summary: Assisting organizations in handling these new regulations (GDPR, CCPA, LGPD, PDPL) trends and risks, by ensuring regulatory compliant flow of personal data, supporting their business.

Key Responsibilities:

• Performing triaging & system assessments
• Data discovery analysis
• Data security consulting
• Triaging matrix for system assessments
• Option selection report template and calculations
• Implementation of Data Subject Rights using data privacy tool

Project Summary: Data Discovery Tool Implementation for the biggest AI and Cloud Computing company in the Middle East to assist them to drive their AI Governance Mandate and also to be compliant to the latest privacy regulations in UAE.

Key Responsibilities:

• Connected and Scanned 20+ Data Sources, searching for Core42 Sensitive Personal Data and Non-Personal Sensitive Data.

Benefits Delivered:

• Successfully found and deleted over 2000+ ex-employee data from the Core42 data landscape in accordance to the Core42 Information Handling and Retention policy.
• Successfully created a Sensitive data categorization according to the Core42 policies.
• Discovered and set up a monitoring system for the business users processing the most sensitive data.
• Created a remediation workflow to assist business users in masking, encrypting or deleting sensitive data.

Project Summary: Privacy Tool RFP and Implementation for the biggest telecommunication company in the Middle East to assist them to be compliant to the latest privacy regulations in Saudi Arabia namely PDPL & NDMO

Key Responsibilities:

• Analyzed and assessed 5 market leading data privacy tools based on client's business and technical requirements.

Benefits Delivered:

• Delivered and implemented data subject rights, records of processing activities register and data breach complaint process.

Project Summary: Data Discovery POC for an American global manufacturer of confectionery, pet food, and other food products and a provider of animal care services

Key Responsibilities:

• Analyzed and assessed two market leading data discovery tools based on client's business and technical requirements.

Benefits Delivered:

• Delivered an option selection report recommending the most suitable data discovery tool based on Mars Requirement assessment.

Project Summary: GDPR Data Discovery and Data Retention project for the second largest airline in the UAE.

Key Responsibilities:

• Triaged and performed data discovery on 50 applications, reported on the personal data being processed, stored or transferred.

Benefits Delivered:

• Delivered the IGC catalogue and data lineage on Sparx transferred.

Project Summary: A Metadata Analysis and GDPR System Assessment project for a UK Publicly owned rail infrastructure and asset management organization.

Key Responsibilities:

• Reviewed and assessed three market leading data governance tools, built use cases to address and demonstrate the client's requirements.

Benefits Delivered:

• Delivered an option selection report recommending the most suitable data governance tool based on Network Rail requirement.

Project Summary: GDPR System Assessment and Security Assessment for the largest Danish train operating company.

Project Summary: GDPR Data Discovery with full structured and unstructured data mapping for Water Company in the UK.

Project Summary: GDPR Data Discovery and Data Security for an American public research, development and manufacturing company.