Local Privacy Officer- Algeria

Job purpose: As the Local Privacy Officer (LPO) for Algeria , the incumbent serves as the primary point of contact and accountability for all data privacy matters within Sanofi Algeria. The role ensures full compliance with Algerian data protection legislation
- including obligations and the main point of contact under the national data protection authority ANPDP (Autorité Nationale de Protection des Données à Caractère Personnel)
- as well as alignment with Sanofi's global privacy framework, policies, and standards. Beyond the core country mandate, this position carries an extended scope covering one or more of the following areas: Africa MCO (Multi-Country Organization), Global Health Unit (GHU) , Global Privacy initiatives , or designated International Region countries. In this capacity, the role acts as a trusted privacy business partner across a broader geography, supporting regional governance, multi-country programs, and global workstreams under the direction of the Africa MCO Data Privacy Officer. The Local Privacy Officer is a key promoter of a culture that prioritizes the protection of personal information. Acting as a strategic business partner accountable for assessing, mitigating, and independently monitoring the privacy risks within their respective Markets/clusters, the role enables data-driven opportunities while maintaining a responsible, ethical, and compliant approach to personal data management.

• Serve as the formally designated Local Privacy Officer (LPO) for Sanofi Algeria, acting as the primary interface between the local affiliate and the Africa MCO Data Privacy Officer, the Global Privacy Office, and the Algerian data protection authority (ANPDP).
• Maintain, update, and govern the Records of Processing Activities (RoPA) for all personal data processing operations conducted by Sanofi Algeria, ensuring accuracy, completeness, and alignment with global standards. Appoint and manage a network of Privacy Champions (point of contacts) within the relevant local departments; Chair the Local Privacy Working Group consisting of appointed Privacy Champions. Through this working Group, design, secure sponsorship and deliver the Local action plan for Privacy; Actively contribute to Privacy Transformation Working Groups where appointed, cascade action plans to Privacy Champions where needed; Actively monitor local privacy regulations/enforcements, and implement local adaptations of global procedures when required by local laws; Contribute to internal position papers, represent Sanofi in industry advocacy efforts (trade associations); Report Program and Operations KPIs through the Global Privacy dashboard.
• In accordance with the Global Privacy reporting framework, produce a yearly activity report and present it to the Country chair and local business operations.
• Lead and coordinate Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs) for local business projects, digital initiatives, clinical activities, and HR processes, ensuring risks are identified, assessed, and mitigated appropriately.
• Provide proactive privacy advisory to local business functions including Commercial, Medical, HR, Legal, IT, and Digital teams on data privacy obligations, new regulatory developments, and best practices.
• Manage and coordinate data subject requests (right of access, rectification, erasure, portability, objection) in accordance with applicable Algerian law and Sanofi's global procedures, ensuring timely and compliant responses.
• Oversee the data breach management process for Algeria, including detection, internal escalation, documentation, and regulatory notification to ANPDP where required, in coordination with the Africa MCO DPO and Global Privacy team.
• Serve as the primary liaison with the ANPDP, managing regulatory filings, declarations, prior authorizations, and any formal correspondence or inspections. For local projects, ensure assessment processes are respected: Promote and champion the usage of the Privacy Checklist by the Business to ensure Privacy-By-Design principles are implemented within projects; Review &validate Personal Data Protection Assessments (PDPA) in Onetrust; When relevant, review and validate Study Compliance Forms or other relevant study questionnaires; Document local variations from global processes and procedures; Ensure that local registrations/filings with competent data protection authorities are completed;
• For Global projects, partner with the BU/GF Privacy Officer in ensuring local practices or regulations are considered at the early stage of design, escalating showstoppers, and offering local resolutions.
• Actively contribute to Sanofi Global Privacy Training strategy in ensuring Materials designed centrally are fit for purpose, review translations and establish the relevant priority audience. xuezdbg Design, coordinate, and track the deliv