Privacy Specialist

Putting people first, every day   BDO is a firm built on a foundation of positive relationships with our people and our clients. Each day, our professionals provide exceptional service, helping clients with advice and insight they can trust. In turn, we offer an award-winning environment that fosters a  people-first culture  with a high priority on your personal and professional growth. Your Opportunity We are seeking a Privacy Specialist to join BDO Canada’s Legal Department. This replacement role will support the firm’s Privacy Office, report to Senior Counsel, Privacy, and work with Information Security, Data Governance, Risk, Human Resources, and other internal stakeholders. The successful candidate will help support the day-to-day operation and continued maturity of BDO’s privacy program, including privacy impact assessments, data mapping, privacy incident response, vendor and technology reviews, privacy inquiries, training and awareness, and privacy program documentation. This role will also support BDO’s work on digital tools, AI, data analytics, and privacy-by-design by helping internal teams understand privacy risks and identify practical steps to address them.   Key Responsibilities Support the operation of BDO’s privacy program by coordinating intake, follow-up, documentation and metrics, and helping develop and update policies, procedures, templates, training and awareness materials. Identify and document personal information flows across systems, processes, service lines, and vendors to support privacy impact assessments, incident response, retention, cross-border transfer assessments, and program governance. Conduct and support Privacy Impact Assessments, DPIAs where applicable, and reviews for digital tools, analytics initiatives, service line projects, internal processes, and new uses of personal information. Help teams apply privacy-by-design and reduce risk through data minimization, access controls, retention, transparency, consent, de-identification, vendor controls, and appropriate use limitations. Assist with privacy incident response, including information gathering, documentation, containment and remediation, breach assessment, and stakeholder follow-up. Support vendor, technology, and cross-border privacy reviews by assessing data flows, vendor practices, security and privacy documentation, data processing arrangements, transfer risks, and transfer impact assessments in collaboration with legal counsel and internal stakeholders. Monitor Canadian and global developments in privacy, data protection, AI, and related regulation, including PIPEDA, provincial privacy laws, Quebec Law 25, GDPR, CCPA/CPRA, regulator guidance, enforcement trends, and industry practices; translate developments into practical updates to BDO's program. Respond to internal privacy inquiries with practical guidance aligned with BDO policies and applicable requirements.   How do we define success for your role?   You demonstrate…