Open to opportunities

Pulkit Chaudhary

@pulkitchaudhary

Message

Data Protection Manager blending legal counsel and privacy engineering to keep organizations compliant across borders.

India

Message

What I'm looking for

I’m looking to lead end-to-end data privacy compliance and privacy-by-design implementations—partnering with IT, Risk, and Compliance to operationalize privacy automation tools and deliver practical legal guidance in regulated, fast-moving environments.

I’m a law graduate specializing in data protection, with around 7 years of legal and data privacy expertise. I currently serve as the Data Protection Manager at SberBank, where I help shape and operationalize a comprehensive data privacy and artificial intelligence framework.

My work focuses on building a banking-focused data privacy and governance framework and ensuring compliance with DPDPA 2023, EU GDPR, UAE PDPL, Russian Data Protection Law, and RBI circulars and Master Directions. I lead Data Protection & Privacy Operations for India Operations, including Privacy by Design and Privacy by Default across banking platforms, AI-enabled tools, and payment systems.

Alongside governance and compliance, I provide practical legal support and privacy risk assessments. I draft, review, and negotiate NDAs, MSAs, SOWs, addendums, Data Processing Agreements (DPAs), vendor agreements, HR documents, and privacy procedures; I also conduct DPIAs and privacy risk assessments for new banking products and digital initiatives. I collaborate with IT, Risk, and Compliance to implement Privacy Enhancing Technologies like encryption, pseudonymization, and access controls, and I deliver employee training on privacy regulations including the Indian Digital Personal Data Protection Act, 2023, EU-GDPR, UAE-PDPL, and the Chinese PIPL.

Before SberBank, I served as a Data Protection Officer at Invia, a Senior Data Protection Consultant at Tsaaro, and a Lawyer & Data Privacy Consultant earlier on. Across roles, I’ve configured and implemented OneTrust and Securiti.ai (including data mapping, DPIA automation, cookie consent, and DSAR automation) and contributed to ROPA and data flow documentation—backed by credentials including CIPP/E and Privacy Ops.

Experience

Work history, roles, and key accomplishments

Current

Data Protection Manager & Legal Counsel

Current

SberBank

Dec 2024 - Present (1 year 7 months)

Lead implementation of a banking data privacy and governance framework, ensuring compliance with DPDPA 2023, EU GDPR, UAE PDPL, Russian data protection law, and RBI circulars. Draft and negotiate data protection agreements, conduct DPIAs/risk assessments, and support privacy-by-design/default and privacy-enhancing technologies.

Data Privacy Compliance Data Governance GDPR UAE PDPL Russian Data Protection Law RBI Circulars Privacy By Design Data Protection By Default Legal Advisory OneTrust Securiti.AI Encryption

Data Protection Officer

Invia

Dec 2023 - Dec 2024 (1 year)

Implemented a data privacy framework to support compliance with the Indian Digital Personal Data Protection Act, 2023 and the Australian Privacy Act. Managed data processing agreements and privacy/cookie/retention policies, delivered legal opinions and employee training, and conducted DPIAs and privacy assessments.

Data Privacy Compliance Digital Personal Data Protection Act Data Processing Agreements Privacy Policy Cookies Data Retention Employee Training

Senior Data Protection Consultant

Tsaaro

Jan 2023 - Nov 2023 (10 months)

Ensured compliance with data protection regulations by evaluating data processing activities, managing privacy risks through DPIAs, and maintaining records of processing. Configured and administered privacy automation using OneTrust and Securiti.ai, including data mapping, DPIA automation, cookie consent, and DSAR automation, and supported GDPR training and data subject query handling.

Data Privacy Compliance DPIAs Data Protection Data Flow Diagrams Data Mapping OneTrust Modules (DPIA Automation DSAR Securiti.AI RFP Responses

Lawyer & Data Privacy Consultant

GCE Global

May 2022 - Jan 2023 (8 months)

Handled data privacy matters in commercial contracts for EOR, PEO, and outsourcing arrangements, including vendor and third-party assessments. Drafted and negotiated DPAs and privacy/cookie/retention documents, prepared ROPAs and data flow diagrams, conducted DPIAs, and led employee privacy training.

EOR PEO Outsourcing Privacy Vendor Assessment Privacy Policy Cookies Data Retention DPIAs Privacy Training

Legal Associate

Sanjay Kumar, Advocate

Jul 2019 - Apr 2022 (2 years 9 months)

Provided legal strategy and opinions for civil defamation matters and related writ and injunction proceedings, and supported corporate and government case work. Drafted and reviewed legal documents and agreements, prepared criminal complaints and defense strategies, and conducted legal research, drafting, and court appearances for civil and criminal matters.