EBUNOLUWA OYASHINA
Summary
Data Privacy and Compliance Analyst specializing in global privacy regulations, including GDPR, CCPA, and HIPAA. Focus on conducting Privacy Impact Assessments and facilitating Privacy by Design initiatives, effectively reducing privacy risks through targeted training and compliance oversight.
Overview
1
1
Certification
11
11
years of professional experience
Work History
Data Privacy and Compliance Analyst
Citizens Bank
Trenton, New Jersey
01.2020 - Current
- Ensure compliance requirements with a variety of global privacy regulations including GDPR, CCPA, HIPAA, PCI-DSS, state Privacy Laws, SOC2 Privacy, ISO 27001, ISO 27018, and ISO 27701.
- Facilitate Privacy by Design by working with key business stakeholders to complete Privacy Impact Assessments (PIAs) and performing the initial review of completed PIAs and Data Protection Impact Assessments (DPIAs) for new processing activities, IT changes, projects, and data ingests.
- Managed response to privacy requests from clients, candidates, and employees, ensuring compliance with privacy law and overseeing data subject access requests (DSAR).
- Conduct and facilitate reviews of IT privacy controls based on standard methodologies and an understanding of technical infrastructure, IT & privacy risk, and cyber security.
- Perform privacy training and awareness for employees and stakeholders.
- Review and negotiate Data Processing Agreements and similar privacy addendum.
- Assist with the monitoring of compliance to third party contractual commitments in relation to IT Risk, Compliance and Privacy requirement.
- Research problems related to data privacy and recommend solutions as well as provide resource estimates and progress reports.
- Developed, implemented, and maintained data privacy controls and security-related compliance measures to effectively mitigate risk.
- Identify, quantify, track and lead mitigation of privacy and compliance risks. Assist with data mapping, data privacy impact assessments, data subject request.
- Support DPIAs and report on associated risks because of the assessments, carry out trend analysis and support the business in approach for risk mitigation. Review vendor contracts for risk analysis.
- Participated in third-party risk management program's privacy component, coordinating with Security, Legal Compliance, and Procurement to assess privacy implications through questionnaire reviews.
- Stay current with existing and new domestic and international laws.
- Assist in privacy and compliance due diligence transactions and in integration of acquired companies into privacy and compliance programs.
Data Privacy Analyst
Valley Hospital
Paramus, New Jersey
01.2017 - 12.2019
- Ensured compliance with HIPAA, HITECH, and state healthcare privacy laws, reducing privacy and compliance risks.
- Monitored and safeguarded PHI/ePHI across EMR systems, cloud platforms, and third-party vendors, conducting access reviews and audits to enhance data security.
- Conducted Privacy Impact Assessments (PIAs) and risk assessments for new technologies, patient portals, and vendor integrations.
- Investigated and managed data breaches and potential PHI exposures, conducting root cause analysis and timely reporting to ensure compliance with regulatory requirements.
- Developed and delivered HIPAA privacy training for clinical and administrative staff, increasing awareness and reducing human error incidents.
- Collaborated with compliance, legal, and IT security teams to enforce Business Associate Agreements (BAAs) and ensure vendor compliance.
- Drafted and updated privacy policies, consent management processes, and Notice of Privacy Practices (NPP), aligning with regulatory updates to ensure organizational compliance.
- Partnered with security teams to audit logs, monitor data flows, and enforce retention schedules, ensuring adherence to healthcare privacy standards.
Vendor Management Analyst
Sims Metal Management
Jersey City, NJ
10.2015 - 12.2016
- Perform a risk assessment of agencies and subcontractors based on the company due diligence procedure.
- Reviewed and analyzed TPRA assessments to identify potential risks and findings.
- Communicate TPRA assessment results with the business and stakeholders.
- Processed vendor requests from agencies, subcontractors, and background check vendors to ensure timely onboarding.
- Reviewed applicant applications and documents for fraud compliance, facilitating accurate approvals by back-office agents.
- Analyze fraud monitors and render a decision to determine the outcome of an application.
- Managed the queue for TPRA assessment requests, ensuring timely processing.
- Collaborated with cross-functional teams to troubleshoot technical issues, improving resolution efficiency.
Education
B.Sc. - Business Management
Kean University
Newark, NJ2014 - Bsc Economics
Kwara State University
KwaraSkills
- Data Processing Agreement (DPA)
- Privacy by Design
- Incident Response and Data Breach Management
- Privacy Impact Assessments (PIAs)
- Privacy Law
- Privacy Policy Development
- DSAR Vendor Assessment and Management
- Data Auditing and Reporting
- Training and Awareness Programs
- Data Governance
- Data Breach Response
- Privacy Audit
- Regulatory Compliance (GDPR, CCPA, HIPAA, etc)
- Data Mapping and Classification
Certification
- Certified Information Privacy Professional/United States (CIPP/US)
- OneTrust Certified Privacy Professional
- OneTrust PIA & DPIA Automation Expert
- OneTrust Data Mapping Automation
Timeline
Data Privacy and Compliance Analyst
Citizens Bank
01.2020 - Current
Data Privacy Analyst
Valley Hospital
01.2017 - 12.2019
Vendor Management Analyst
Sims Metal Management
10.2015 - 12.2016
B.Sc. - Business Management
Kean University
2014 - Bsc Economics
Kwara State University