Local Privacy Officer- Algeria

About the job

Job purpose:

As the Local Privacy Officer (LPO) for Algeria, the incumbent serves as the primary point of contact and accountability for all data privacy matters within Sanofi Algeria. The role ensures full compliance with Algerian data protection legislation — including obligations and the main point of contact under the national data protection authority ANPDP (Autorité Nationale de Protection des Données à Caractère Personnel) — as well as alignment with Sanofi's global privacy framework, policies, and standards.

Beyond the core country mandate, this position carries an extended scope covering one or more of the following areas: Africa MCO (Multi-Country Organization), Global Health Unit (GHU), Global Privacy initiatives, or designated International Region countries. In this capacity, the role acts as a trusted privacy business partner across a broader geography, supporting regional governance, multi-country programs, and global workstreams under the direction of the Africa MCO Data Privacy Officer.

The Local Privacy Officer is a key promoter of a culture that prioritizes the protection of personal information. Acting as a strategic business partner accountable for assessing, mitigating, and independently monitoring the privacy risks within their respective Markets/clusters, the role enables data-driven opportunities while maintaining a responsible, ethical, and compliant approach to personal data management.

Key accountability:   

Core – Algeria Local Privacy Officer

• Serve as the formally designated Local Privacy Officer (LPO) for Sanofi Algeria, acting as the primary interface between the local affiliate and the Africa MCO Data Privacy Officer, the Global Privacy Office, and the Algerian data protection authority (ANPDP).
• Maintain, update, and govern the Records of Processing Activities (RoPA) for all personal data processing operations conducted by Sanofi Algeria, ensuring accuracy, completeness, and alignment with global standards.
  • Appoint and manage a network of Privacy Champions (point of contacts) within the relevant local departments; 
  • Chair the Local Privacy Working Group consisting of appointed Privacy Champions. Through this working Group, design, secure sponsorship and deliver the Local action plan for Privacy;
  • Actively contribute to Privacy Transformation Working Groups where appointed, cascade action plans to Privacy Champions where needed;
  • Actively monitor local privacy regulations/enforcements, and implement local adaptations of global procedures when required by local laws;
  • Contribute to internal position papers, represent Sanofi in industry advocacy efforts (trade associations);
  • Report Program and Operations KPIs through the Global Privacy dashboard;
• In accordance with the Global Privacy reporting framework, produce a yearly activity report and present it to the Country chair and local business operations;
• Lead and coordinate Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs) for local business projects, digital initiatives, clinical activities, and HR processes, ensuring risks are identified, assessed, and mitigated appropriately.
• Provide proactive privacy advisory to local business functions including Commercial, Medical, HR, Legal, IT, and Digital teams on data privacy obligations, new regulatory developments, and best practices.
• Manage and coordinate data subject requests (right of access, rectification, erasure, portability, objection) in accordance with applicable Algerian law and Sanofi's global procedures, ensuring timely and compliant responses.
• Oversee the data breach management process for Algeria, including detection, internal escalation, documentation, and regulatory notification to ANPDP where required, in coordination with the Africa MCO DPO and Global Privacy team.
• Serve as the primary liaison with the ANPDP, managing regulatory filings, declarations, prior authorizations, and any formal correspondence or inspections.
  • For local projects, ensure assessment processes are respected:
  • Promote and champion the usage of the Privacy Checklist by the Business to ensure Privacy-By-Design principles are implemented within projects;
  • Review & validate Personal Data Protection Assessments (PDPA) in Onetrust;
  • When relevant, review and validate Study Compliance Forms or other relevant study questionnaires;
  • Document local variations from global processes and procedures;
  • Ensure that local registrations/filings with competent data protection authorities are completed;

• For Global projects, partner with the BU/GF Privacy Officer in ensuring local practices or regulations are considered at the early stage of design, escalating showstoppers, and offering local resolutions;
• Actively contribute to Sanofi Global Privacy Training strategy in ensuring Materials designed centrally are fit for purpose, review translations and establish the relevant priority audience. Design, coordinate, and track the delivery of local privacy training and awareness programs, ensuring all relevant employees and contractors are appropriately informed of their data privacy obligations.
• Support the review, negotiation, and execution of Data Processing Agreements (DPAs) and conduct third-party vendor privacy assessments to ensure compliant data sharing and processing arrangements.
• Monitor the Algerian data protection regulatory landscape, proactively identifying legislative changes and assessing their impact on Sanofi's operations, and escalating material risks to the Africa MCO DPO.
• Maintain and report on local privacy compliance metrics and KPIs, contributing to regional and global governance reporting cycles.
• Ensure the proper implementation of Sanofi's global privacy policies, standards, and procedures at the local level, adapting them to local legal requirements where necessary.
• Partner with Sanofi Auditors for the planning and execution of internal audits; 
• Manage data protection dawn raids in accordance with GPO dawn-raid procedure and local requirements;

Extended Scope – Africa MCO / Global Health Unit / Global Privacy / International Region

• Support the Africa MCO Data Privacy Officer in coordinating and overseeing privacy activities across the MCO, including multi-country project reviews, regional risk assessments, compliance monitoring, and governance reporting.

• Support Global Health Unit initiatives and projects, coordinating and overseeing privacy activities, including multi-country project reviews, regional risk assessments, compliance monitoring, and governance reporting.

• Contribute actively to Global Privacy programs and workstreams, including the development and rollout of global policies, privacy tooling (e.g., OneTrust), consent management frameworks, and cross-functional compliance initiatives.

• Act as Privacy Business Partner for additional International Region countries as assigned.

• Participate in and contribute to the Global Privacy Network, sharing best practices, lessons learned, and regulatory intelligence across the international privacy community within Sanofi.

• Represent the Africa MCO or International Region in global privacy governance forums, working groups, and steering committees as delegated by the Africa MCO Data Privacy Officer.

Key Working Relationships

Internal:

• Direct local privacy champions with clear expected outcomes in line with the local action;

• As the voice of privacy rights of employees, act with integrity and independence with regards to resolutions of potential conflicts;

• Establish credibility and influence local senior stakeholders such as General management, Digital, P&C, LEBI, Medical, Regulatory, Commercial & Digital;

• Confident in escalating project risks and issues to senior leaders individually and collectively, i.e.. The global privacy committee;

External:

• As the voice of privacy rights of external Data Subjects (candidate, consumers, patients, HCPs and Third Party vendors), act with integrity and independence with regards to resolutions of potential conflicts;

• As the main point of contact of Algerian Data Protection Authority — ANPDP (Autorité Nationale de Protection des Données à Caractère Personnel), establish an active relationship in line with Sanofi commitments;

• Represent Sanofi within local Privacy and trade associations;

• External legal counsel (as required)

• Regulatory bodies in International Region countries (where extended scope applies)

Qualifications

• Soft skills: Strong business acumen • Personally mature, able to deal effectively with complex issues and manage conflicts • Highly self-organized and accurate with documents • Relationship building & networking / influencing skills;

• Technical skills: Privacy certification CIPP highly desired, OneTrust (advanced);

• Education: Bachelor's or Master's degree in Law, Information Technology, Business Administration, or a related field. A specialization in data protection or privacy law is a strong advantage.

• Knowledge: Strong working knowledge of Algerian data protection law and ANPDP regulatory requirements. Solid understanding of GDPR principles and international privacy frameworks. Familiarity with privacy risk management methodologies, PIA/DPIA processes, and data governance practices.

• Experience: Minimum 3–5 years of professional experience in data privacy, legal compliance, or a closely related field. Prior experience in the pharmaceutical, healthcare, or life sciences sector is highly desirable. Experience working in a multi-country or regional role is an asset.

• Languages: Full professional fluency in Arabic and French (required). Professional proficiency in English is strongly preferred to enable effective collaboration with global and regional teams.

Behavioral Competencies

Aligned with Sanofi's Core Values:

• Aim Higher — Continuously raises the bar on privacy compliance standards, proactively identifies emerging risks, and drives improvement across Algeria and the extended scope. Does not settle for minimum compliance but strives for privacy excellence.

• Act for Patients — Keeps the protection of patient, employee, and stakeholder personal data at the heart of every decision. Understands that responsible data management is a direct expression of Sanofi's commitment to the people it serves.

• Be Bold — Challenges the status quo, advocates for privacy as a strategic business enabler rather than a barrier, and is not afraid to raise difficult issues or escalate concerns when necessary. Embraces innovation while maintaining ethical guardrails.

• Lead Together — Builds strong, trust-based relationships across functions, geographies, and cultures. Actively contributes to the Africa MCO and Global Privacy communities, shares knowledge generously, and fosters a collaborative privacy culture throughout the organization.

Pursue Progress, discover Extraordinary

Better is out there. Better medications, better outcomes, better science. But progress doesn’t happen without people – people from different backgrounds, in different locations, doing different roles, all united by one thing: a desire to make miracles happen. So, let’s be those people.

At Sanofi, we provide equal opportunities to all regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, or gender identity.

Watch our ALL IN video and check out our Diversity Equity and Inclusion actions at sanofi.com!