Siddhartha Singh Roy

About Siddhartha Singh Roy

Ethics and compliance professional with extensive experience in Data Privacy, Anti-corruption and Sanctions.

Experience

1. General Manager - Compliance, Legal Department

   Tata Communications

   Oct 2025 — Present · Mumbai, IN

   Data Protection Officer (DPO) of subsidiaries in Singapore, Russia and Germany. Member of ICC for POSH. Divisional Ethics Counsellor Managing the global privacy framework including data privacy impact assessments, advisory, audits and other compliance initiatives pertaining to recently introduced and upcoming privacy laws. Managing the anti-corruption framework including implementation and monitoring of effective controls pertaining to giving and receipt of benefits to and/or from third parties. Managing the due diligence program with respect to third party intermediaries and implementation of adequate controls to mitigate risks. Managing the compliance framework in collaboration with designated stakeholders from all BUs across 35+ geographies. Managing the sanctions framework including periodic policy revisions to capture changes in applicable sanctions laws; and to review, screen, advise and approve/decline transactions connected to countries subject to sanctions. To review and update existing compliance policies on a periodic basis and create new company policies and SOPs to address new business requirements and ensure processes are in accordance with applicable laws. Managing training, awareness and communication campaigns to promote visibility of Company’s policies; and maintain the culture of ethics and compliance within the Company. To design and update the content of e-Learning modules on various compliance policies for internal as well as external training programs. To conduct risk and gap assessments in key compliance risk areas. To advise the commercial legal team and develop internal guidelines to equip them to negotiate compliance clauses in commercial contracts. Adopting technology within the Function to automate various processes such as (i) privacy management and reporting,(ii) approvals, monitoring and reporting of giving and receipt of due diligence program for onboarding third parties, etc.

Education

• Asian School of Cyber Laws

  Diploma in Cyber Laws

  2009 — 2010

• Symbiosis Law School

  B.B.A. LL.B.

  2007 — 2012

• The Compliance & Ethics Academy

  Certified Compliance and Ethics Professional

• World Intellectual Property Organization

  Course on Intellectual Property

  2009 — 2010

• Tata Sustainability Group

  Certified Sustainability Champion

• Data Security Council of India

  DSCI Certified Privacy Professional

• Tata Management Training Centre, Pune

  Masterclass for Ethics Counsellors