Open to consulting engagements

Nivya Manakal Ajit

Privacy Program Implementation Lead CCPA/CPRAGDPRDPDPA

I turn privacy law into workflows your team can run every day and defend in an audit.

Eight years building privacy programs for Fortune 500 companies on WireWheel, OneTrust and Osano: request handling, assessments, consent and audit-ready governance.

Book a 30-minute call → See my work

At a glance

Focus
DSR operations, assessments, consent, governance, audit readiness
Platforms
WireWheelOneTrustOsano
Now
Privacy consultant, Nyusta Technologies · DPDPA gap analyses
Before
Osano · WireWheel · Shoes.com
Based
Bengaluru, India · works remotely, worldwide
40+client privacy programs built
3privacy platforms, hands-on
8years in privacy
20years in technology delivery
Built forFortune 500 companiesE-commerce and retailReal estateSaaS
About

From quality engineering to privacy implementation

I've spent 20 years in technology delivery. I started in software quality at Tech Mahindra and Sapient, where I was part of the team that prepared Tech Mahindra for CMMI Level 5, then moved into business analysis.

In 2018 I moved into privacy through a contract with Shoes.com, going from business analyst to running the company's CCPA program. From 2021 I spent five years on the vendor side: at WireWheel I built privacy programs for 40+ enterprise clients, and at Osano I rebuilt client programs after the acquisition.

Today I consult through Nyusta Technologies, the technology services company I co-founded in 2017. I'm also a co-founder of Neostra, a privacy product started in 2024.

Why teams bring me in

Most people can tell you what the law requires. I make it work.

Requests stuck in a shared inbox. A platform that's only half configured. An audit on the calendar. That's usually when teams call me.

Hands-on with 3 platforms

WireWheel, OneTrust and Osano. I know where each one shines and where it needs a workaround.

Migrations done right

I've moved live programs between platforms and come out with a better design each time.

I've run the requests

I handled CCPA requests myself before designing workflows for others.

Audit-ready by design

A quality-engineering background (CMMI Level 5) means evidence is built in from day one.

Selected work

Four case files. Pick one.

Osano · 2023 – 2026

Rebuilding client programs on a new platform

6client programs rebuilt
Before · WireWheel
Assessments
DSAR workflows
Consent setup
redesignednot copied
After · Osano
Assessments
DSAR workflows
Consent setup
Challenge
After Osano acquired WireWheel, client programs had to move to a new platform without disrupting live request handling, assessments or consent.
What I did
Mapped each client's assessments, DSAR workflows and consent setup, then redesigned them around how Osano works instead of copying them field for field.
Outcome
Six client programs moved to and running on Osano, with workflows rebuilt to suit the new platform.
1 of 4
Expertise

What I do best

DSR operations

End-to-end request workflows for CCPA/CPRA and GDPR, built or redesigned.

CCPA/CPRAGDPRServiceNowSLAs

Assessment design

DPIAs, HRAs and vendor assessments people can complete.

DPIAVendor riskScoring

Consent management

Cookie consent, regional rules and opt-outs.

CookiesRegional rulesOpt-outs

Governance and audit

Evidence designed in, gap analyses that end in a plan.

EvidenceGap analysisControls

Implementation and migration

Requirements to rollout, and platform-to-platform moves.

WireWheelOneTrustOsano

India DPDPA readiness

Gap analyses and practical plans for India's new law.

Gap analysisConsentRights
Illustrative example

How I design a privacy rights workflow

  • Every stage has an owner. Nothing waits in a shared inbox.
  • Every deadline is tracked. CCPA, GDPR and DPDPA clocks set at intake.
  • Every action leaves a record. So the audit trail builds itself.
Career

Twenty years of delivery, eight in privacy

Quality engineering and analysisPrivacy implementationConsulting through Nyusta
2018 – nowPrivacy ConsultantNyusta Technologies
  • Now: DPDPA gap analyses for organisations preparing for India's data protection law
  • Now: privacy program implementation and DSR advisory
  • 2018 – 2021: Shoes.com contract engagement, detailed below
2023 – 2026Implementation SpecialistOsano
  • Moved WireWheel clients onto Osano after the acquisition: six client programs
  • Redesigned and rebuilt assessments, DSAR workflows and consent configuration for the new platform
2021 – 2023Privacy Implementation SpecialistWireWheel
  • Built privacy programs for 40+ clients, including Fortune 500 companies in e-commerce, real estate and SaaS
  • Designed DSAR workflows, including GDPR workflows for a client operating across Europe
  • Designed DPIAs, HRAs and vendor assessments, and configured consent management
  • Built programs for audit readiness, including evidence collection; took part in client gap analyses
  • Built a governance-ready program outside the platform
  • Worked with engineering on custom solutions and with product on new features
2018 – 2021Business Analyst, then Privacy Program ImplementationShoes.com · contract through Nyusta Technologies
  • Led the privacy program implementation on OneTrust: DSAR workflows and a OneTrust–ServiceNow integration for fulfilment
  • Rebuilt the program after the company moved to WireWheel
  • Fulfilled CCPA requests: identity verification, review and redaction, deadline tracking
2017 – nowCo-founderNyusta Technologies · Neostra (since 2024)
  • Nyusta Technologies: technology services company serving international clients
  • Neostra: privacy product; translated DPDPA, GDPR and CCPA requirements into functional specifications
  • Held alongside the roles above
2006 – 2017Quality engineering and business analysisTech Mahindra · Sapient Consulting · KnoxWorx
  • Business Analyst, KnoxWorx Technologies (2015 – 2017)
  • Senior Associate, QA Lead, Sapient Consulting (2010 – 2015)
  • Associate, QA, Tech Mahindra (2006 – 2009); part of the team that prepared the company for CMMI Level 5
CredentialsOneTrust PIA & DPIA Automation ExpertOneTrust Privacy Rights AutomationOneTrust Data Mapping Automation ExpertB.E. Telecommunications
Working together

Where I can help your team

Platform implementation

WireWheel, OneTrust, Osano and similar, configured to fit your team.

DSR operations

Fix request handling that's slow, manual or hard to evidence.

Assessments and governance

DPIAs, vendor assessments and evidence that hold up.

Platform migrations

Move platforms and come out with a better design.

DPDPA readiness

Gap analysis and a practical plan for India's law.

I'm a fit if you're looking for
  • A privacy technology implementation consultant
  • A CCPA/CPRA rights program specialist
  • GDPR DSAR workflow design
  • A DPDPA readiness consultant
  • A privacy platform migration specialist
  • Privacy workflow and governance design
Project-basedContract or fractionalRemote, any time zone

Independence: I co-founded a privacy product company and disclose it up front. In client work I build on the platform you've chosen.

Contact

Let's make your privacy program work.

Tell me what you're implementing, migrating or fixing.

Book
Open
Based inBengaluru, India · working remotely worldwide