Thomas Dombrowski

I am a Certified Information Privacy Professional with over five years designing and operationalizing privacy programs across global frameworks including GDPR, LGPD, PIPEDA, and U.S. state privacy laws.

At PlanetArt I led privacy-focused compliance initiatives including management of FTC Consent Order requirements, implementation of an automated DSAR procedure, OneTrust configuration, Article 30 ROPA development, cookie consent policy, mobile app compliance audits, vendor risk reviews, and privacy incident response playbooks.

As a DPO adviser and Data Privacy Manager I conducted gap analyses, supported GDPR, CCPA/CPRA, GLBA, HIPAA, SOC 2, ISO/IEC 27701, and NIST Privacy Framework alignment, led enterprise data mapping, DPIAs/DTIAs, vendor assessments, data retention programs, and developed role-based privacy training and automation workflows.

I translate legal requirements into scalable procedures and embed privacy-by-design into product and system development to support audit readiness, risk reduction, and operational efficiency across retail, fintech, SaaS, and e-commerce environments.