The situation
An organisation operates across multiple regions. Each office has its own processes, suppliers and way of handling personal information. Privacy decisions are made locally, but responsibility for oversight remains shared.
The decision
Which requirements need consistent treatment across the organisation? Where must local practices differ? Who approves data handling? How do teams raise issues, document decisions and work with specialist providers?
What this type of work involves
Reviewing how privacy work actually moves between people, systems and locations; clarifying responsibilities; and considering an operating model that teams can follow. Relevant professional experience includes cross-border legal and privacy operating-model work across multiple regions.
What a useful outcome looks like
A clearer picture of who is responsible, where handovers cause confusion and which processes need common rules or specialist support. It creates a basis for detailed design or implementation by the appropriate teams or partners.