Data Protection Officer

Role purpose
To work with colleagues across the company and contact points at client companies and suppliers to ensure compliance with data protection legislation.

Location
This role is based in our modern Richmond office, with parks and the riverside just a few minutes walk away to enjoy in your lunch break.

Key responsibilities

  • Manage Data Subject Requests (liaising with external clients and internal Customer Service and Tech teams) and relevant records
  • Advise on Data Privacy elements of promotions (including contracts, privacy notices, terms and conditions and UX of promotion websites)
  • Collaborate with Project Management and Digital Teams to keep Article 30 Record up to date
  • Design and deliver generalised and targeted privacy training
  • Train and supervise trainee(s) and paralegals to support on DP matters
  • Advise key Incident Response team members on incidents/breaches involving personal data
  • Advise on ad-hoc privacy-related queries and matters

Key deliverables

  • Push GDPR project plan currently in implementation process to completion
  • Manage SAR, breach notification process and ICO relationship
  • Manage all records relating to Data Protection
  • Design and deliver training tailored to the company’s business and to different departments within the company
  • Keep abreast of developments in the Data Privacy space and share Data Protection knowledge with other members of the Legal Team

Skills and experience required

  • Resilience in order to influence senior partners and resistant staff in ensuring compliance with the way that they work
  • Good interpersonal / communication to build relationships and communicate effectively with senior Management/Partners and internal and external data subjects
  • Literate, numerate and articulate
  • Organised with the ability to prioritise and juggle deadlines and workload

Knowledge required

  • An in depth understanding of GDPR/data protection
  • Operational aspects of data protection including privacy practices such as impact assessments, handling data subject’s requests, employee monitoring, third party contracts and breach management

Salary: £45,000.00 to £50,000.00 /year