Toyosi K.

About Toyosi K.

Data privacy and compliance professional with 5+ years of hands-on experience supporting global privacy programs across cloud, SaaS, healthcare, finance, and other regulated environments. Experienced in operationalizing GDPR, CCPA/CPRA, HIPAA, GLBA, FERPA, and ISO/NIST-aligned privacy standards.Brings a strong blend of regulatory analysis and practical execution, including DPIAs, PIAs, AI impact assessments, RoPAs, DSAR workflows, consent management, vendor risk reviews, and privacy-by-design implementation with engineering and product teams.Experienced with privacy tooling and workflows using OneTrust, ServiceNow, AWS/Azure, and process automation to improve audit readiness, reduce regulatory exposure, and scale privacy operations.Background includes 15+ years as a licensed attorney, providing deep understanding of regulatory interpretation, risk mitigation, and cross-functional stakeholder engagement.

Experience

1. Privacy & Compliance Specialist

   Actalent

   May 2024 — Present

   I support Microsoft’s global privacy and compliance operations by strengthening governance, automation, and responsible AI practices across cloud and SaaS environments. My work spans RoPA management, DPIAs/AIIAs, DSAR automation, vendor reviews, policy governance, HIPAA/PHI compliance, and audit readiness.I maintain GDPR-aligned RoPAs in OneTrust, mapping systems, data elements, and processors to improve accuracy, support audits, and ensure regulatory transparency. I configure and manage cookie banners and preference centers to meet GDPR, ePrivacy, and CPRA “Do Not Sell/Share” requirements, improving consent traceability across regions.I design automated DSAR workflows in OneTrust and ServiceNow that reduce manual handling and improve SLA performance. I conduct DPIAs, PIAs, AI Impact Assessments, and Legitimate Interest Assessments, recommending privacy-enhancing controls like encryption, pseudonymization, and fine-grained access to mitigate privacy and AI model risks.I perform vendor and third-party privacy assessments, reviewing DPAs, SCCs/TIAs, security questionnaires, and automated decision-making risks to ensure responsible data use and compliant cross-border transfers. I draft and update policies aligned with GLBA, CCPA/CPRA, FCRA, HIPAA, TCPA, and emerging AI governance requirements for analytics and marketing workflows.I lead internal privacy risk assessments and remediation tracking, including audits of AI-enabled tools and PHI systems. I investigate privacy complaints, support incident response and breach analysis, and partner with IT/security teams to remediate over-privileged access and strengthen controls.I develop Excel-based dashboards to track DSAR SLAs, incident trends, risk themes, and remediation progress, giving leadership greater visibility into program performance.

Education

• Obafemi Awolowo University

  Bachelor of Laws - LLB, Law

• North Carolina Central University

  Master's degree, Information Science

  2020 — 2021

• University of Lagos

  Master of Laws - LLM, Banking, Corporate, Finance, and Securities Law

• Nigerian Law School

  Barrister at Law (B.L.), Law