Data Protection Assistant

Job Summary

The Data Protection Assistant will play a pivotal role in ensuring that our organisation remains compliant with current Data Protection regulations. This is a varied role within the Legal department which would suit someone who is looking to build a career within data privacy/law. This position requires a blend of analytical ability, technical knowledge, and effective communication skills to effectively collaborate with various departments and contribute to the organisation's comprehensive data protection programme. The Data Protection Assistant will be a key source of data protection knowledge, providing advice & guidance to the business, supporting our continuously improving approach to data protection, and responsible for monitoring and promoting compliance with UK GDPR and Data Protection law.

Job Duties

• Own and process responses to data subject access requests (DSARs), and other information requests within the required legislative timescales.
• Respond to requests for personal data from the Police or local authorities exercising statutory powers.
• Breach Management, assist the DPO in investigating data breaches and near misses and implementing remediations plans and working to identify solutions to prevent recurrence.
• Assist colleagues to conduct Data Protection Impact Assessments (DPIA) when a new project starts or when significant changes are made to existing processes, and to support the development of the relevant data processing agreements etc.
• Support the development of documentation to facilitate information sharing with third parties, such as Information Sharing Agreements.
• Manage data mapping activities across the organisation and maintain accountability documentation under article 30 – Records of processing activities (RoPA).
• Compiling monthly management information and reporting on the same to the Data Protection Officer.
• Support the delivery of an effective training and awareness programme to all staff to raise awareness of data privacy and relevant controls and procedures.
• Support the internal audit function in conducting routine audits and producing audit reports for senior management.
• Collaborate with legal and security functions on vendor due diligence and assessments.
• Support the DPO in carrying out their statutory and other responsibilities.
• Managing the DPO@Parkholidays inbox and attend meetings in the DPO’s absence.
• Contribute to the development, review and continuous improvement of data protection policies and procedures.
• Working collaboratively with all business areas to develop and improve business processes to improve compliance and productivity in relation to data privacy.

Requirements

• Degree level education and experience working in data protection or a related field, with a focus and strong understanding of the requirements as a Data Controller.
• A good working knowledge of UK GDPR and Data Protection legislation and a keen interest in staying up to date with the fast-moving landscape of data protection technologies.
• Well organised with the ability to work independently, manage time well, prioritise effectively and handle multiple deadlines.
• Able to work under pressure delivering high quality work in constrained timescales.
• Ability to handle confidential and sensitive information with the appropriate discretion.
• Have a keen eye for detail and accuracy.
• Excellent written and verbal communication skills.
• Competent in interacting effectively with people at all organisational levels.
• Competent IT literacy; working knowledge of Microsoft Software.
• Microsoft and Purview skills – desirable but not essential.
• Experience of working in the holiday park sector – desirable but not essential.