Team size 19

What are the key projects that you have been involved in over the past twelve months?

Over the past twelve months, I led the comprehensive implementation of the bank’s personal data protection programme, a strategic project aimed at strengthening regulatory compliance and risk management in the processing of customer information, within a highly regulated and constantly evolving environment.

This project involved the organisation’s gradual alignment with the Personal Data Protection Act and its supplementary regulations. In this context, a structured process was carried out to identify and map personal databases at an institutional level, as well as to review and update internal policies, procedures and guidelines relating to the processing of personal data. Furthermore, mechanisms were designed and implemented to ensure the proper handling of ARCO rights (access, rectification, erasure and objection), thereby strengthening transparency in our relationship with customers.

In addition, I led the incorporation of privacy by design and by default standards into the development of new products and digital channels, working across departments with the technology, risk, compliance and business areas, which enabled the integration of personal data management into the bank’s key processes.

The programme also involved the implementation of specific controls and contractual clauses for the management of third parties and critical suppliers, particularly in outsourcing arrangements, ensuring that the processing of personal data by these parties is carried out in accordance with the required regulatory standards.

This project enables us not only to make structured progress towards regulatory compliance, but also to lay the foundations for a more robust data governance model, aligned with international best practices and the bank’s strategic objectives.