Moa Mörner

Working close with Privacy Office, Legal, IT, the IT- and Information Security team as well as the Security team. One-to-One meetings with Group CEO as well as CEO at the subsidiaries. Reporting privacy risks to the risk committee (board) as well as a part of the information security management system to group management. Assessments such as processor or controller relations, DPIA, TIA and audits of Processor as well as all other normal DPO-tasks due to the GDPR. Building a Data Protection Programme, Recruitment, and set-up of Privacy Office, updating processes to meet requirements from Data subjects (the right to access, to be forgotten, Data portability, restrictions) and a new way of working understanding and managing chosen risk appetite in the company for Data Protection Compliance Risk. Also been working with CCTV on trains, graffiti, and an agile way of working.

As a senior Data Protection Officer working with questions concerning processing of special categories of personal data (article 9) the tasks are (in short)

• to inform and advise the controller and the processor at the highest management level of the organization to ensure compliance with GDPR requirements

• to offer education to the employees who carry out processing of personal data, for an example on Data Protection Agreements, how to process data as the employer for HR and management or data protection in Membership Centre or personnel management

• to advise Data Protection Managers on how to understand and implement the data protection legislation on an operative level, instructions and checklists, data protection policies, DPA and records of processing activities

• to do assessments and recommendations for decision-making in procurement and development of IT-systems (cloud-services included) as well as other services that includes data processing (DPIA) Special tasks are

• to co-ordinate Information Security implementation projects (ISO 27001 and 27002),

• co-ordinate data protection strategy to ensure compliance with GDPR requirements between six organizations (6F)

• develop a digital support for monitoring data compliance

The Swedish Association of Graduates in Business Administration and Economics (Civilekonomerna in Swedish), is a union and interest organisation for professionals and students in business and economics in Sweden with 44 000 members. Our Membership Service department receives questions about fees, membership, payments, income insurance, withdrawal, benefits and much more. My current mission is to turn a reactive membership service department into a recruiting and service-oriented service for members.

• Change management: Motivate / enthusiastic employees to work in new ways and, through my understanding of the business, create the right digital conditions for more effective workflow. My leadership area is in the interface of human-business and IT.

• Business Development: Digitizing Membership Services, automation, and more efficient digital workflows that release time to work more qualitatively against members and leads.

• System Administrator for our CRM system, Salesforce and IT project management of the implementation of new features / integrations.

• Currently, I am project leader for adaptation to the GDPR (General Data Protection Regulation). Previously, I was coordinator for the Personal Data Act, including administration of Personal Data Assistant Agreements.

• Also I represent the union in Saco's joint work with GDPR and am active in one of the working groups to develop a guide for all Saco associations.

• Supervisor for two employees at Member Service

• Experienced talking to groups/training: Internal recruitment training, telemarketing agency, and introduction for new colleagues about the business and about Salesforce

• Budget, business reporting including membership recruitment statistics