Kiat H.

About Kiat H.

25 years of professional work experience, currently with iHerb in Los Angeles Passion for data privacy, data protection and information security, as well as all things digital, technology and internet-related. 15 years of hands-on IT Security experience followed by 10 years of management experience, including 8 years of privacy management experience overseeing compliance with the CCPA/CPRA, GDPR, PIPL, APPI, PIPA, etc. Strong project management, inter-personal communication, people and team building skills with the ability to interface at all levels vertically and horizontally. Agility in dynamic, fast-paced work environments in a diverse range of industries ranging from product sales to consulting, financial services to media and entertainment, tech startups to global eCommerce platforms. A proactive, solutions-oriented and detail-oriented team player who can also work well independently, a go-getter, and a do-gooder with strong ethics. BS in Electronics and Communications Engineering from the UK. Worldly, lived on 3 continents, and knowledgeable in four languages, including English and some Chinese.

Experience

1. Director of Global Privacy Compliance

   iHerb

   May 2021 — Present · Pasadena, CA, US

   Lead the Global Privacy Office for a multi-billion dollar, US-based, cross-border eCommerce company operating in 180+ countries with tens of millions of customers / data subjects. Enterprise compliance with CCPA, GDPR, APPI (Japan), PIPA (S Korea), PIPL (China), and various state privacy regulations such as CO, CT, UT, and VA. Socialize and evangelize data privacy principles and best practices across the company globally. Advice on privacy compliance and privacy engineering matters, such as collection of customer consent, PI/PD data deletion, database access control, data minimization, data localization, Privacy by Design for new applications and websites, etc. Work with Legal to review Data Processing Agreements (DPAs) and update the EU Standard Contractual Clauses (SCCs) for all third-parties handling EU-based Personal Data. Update the company’s data privacy notice (external) and policy (internal), and launch a company-wide privacy awareness and training program. Work with Legal on cross-border compliance matters in various Asia-Pacific countries, including China, Japan, South Korea and South-East Asia. Work with IT Security on various privacy/security projects, particularly vendor privacy/security risk assessments. Respond to privacy audits by independent third-parties and B2B customers.

Education

• University of Bristol

  Bachelors of Science, Electronic and Communications Engineering

  1995 — 1997

Skills

• Load Balancing
• Network Security
• Switches
• Networking
• Network Engineering
• Firewalls
• Malware Analysis
• Secure Network Architecture
• Checkpoint
• Information Security
• Cisco Technologies
• Disaster Recovery
• Gdpr
• Information Security Management
• Privacy
• Security
• Ips
• Routers
• Penetration Testing