Umesh Kumar

Led India’s data privacy (DPDPA 2023) compliance program across four sites, defining the implementation roadmap and operating model. Established privacy governance controls (PIA, DPIA, ROPA, privacy notices, consent and DSAR) across business processes and operationalized a data governance function aligned to enterprise frameworks. Built an internal consent/DSAR platform and deployed a “Privacy Assistant” using Microsoft Copilot to reduce manual privacy query handling. Oversaw privacy assurance, third-party contract upliftment, responsible AI governance for enterprise AI models, and risk assessments and control testing across delivery centres.

Drove enterprise data risk management for Corporate & Institutional Banking, covering data privacy, governance, quality, sovereignty, records management and emerging AI governance. Led a global data privacy transformation program across multiple businesses, delivering risk treatment plans and improving data management maturity. Completed large-scale PIAs/DPIAs and ROPAs while embedding privacy-by-design into business and technology change. Supported cross-border data governance through SCC upliftment and intergroup transfer arrangements tied to GDPR compliance, and helped operationalize data products via an MDM platform.

Managed GDPR-aligned data protection initiatives by embedding privacy-by-design controls into key systems and data flows at the Pune site. Developed and tracked privacy risk metrics (KRIs/KPIs) and produced executive dashboards to improve risk visibility and governance reporting. Supported privacy transformation through automation of compliance monitoring workflows and structured gap assessments to strengthen audit readiness and remediation.

Conducted GDPR-aligned privacy gap assessments and designed data discovery and DPIA frameworks. Supported compliance and audit readiness efforts for BFSI clients by translating privacy requirements into structured assessment artifacts and governance processes.

Led fraud investigations and insider risk management activities across operational functions. Supported business risk and controls, information security risk, vetting and governance programs across lines of business and global functions, building expertise in operational risk and investigation governance. Contributed to control effectiveness and compliance-oriented governance within global banking operations.