Marykaren Ripple

Senior Privacy and Data Protection Counsel at FirstBank

May 2022 - Present • Lakewood, United States

Responsible for building a strategic and comprehensive privacy program that defines, develops, maintains, and implements policies and processes that enable consistent, effective privacy practices which minimize risk and ensure the confidentiality of personal information. Ensure privacy forms, policies, standards, and procedures are in place and up to date. Work with organizations senior leadership, engineering, and information security, to establish governance for the privacy program. Serves in a leadership role for privacy education and compliance. Collaborate with the information security officer to ensure alignment between security and privacy programs including policies, practices, investigations, and incident response, including advising on best practices, mitigation of risk, and preparing for data breach incidents. Maintain and update an ongoing process to track, investigate, and report inappropriate access and disclosure of personal information, including internal patterns of inappropriate access and/or disclosure of personal information. Establish procedures for and conduct data protection/privacy impact assessments (DPIA/PIA)/analysis, mitigation, and remediation. Create, implement, and conduct vendor privacy risk assessment, and ensure proper contractual language is included though inclusion of a data protection addendum and, if needed, Standard Contractual Clauses. Promote and encourage a culture of data privacy across the organization through education, collaboration, and inclusion.