I started in the role of Chief Privacy Officer role at Pearson very recently, though I have been in the Legal team for eighteen years. I have been blessed with a wealth of resources at my disposal: a central Data Privacy Office team, policies for each area of the business, an incident response toolkit, an established privacy impact assessment process, memberships of various expert bodies and access to training and knowledge resources. I realise that probably makes me very lucky amongst many of you.
But even with the backing of good infrastructure, making best use of resources is key. So what have been the next steps?
