Overview
If you’re passionate about data, transparency and ensuring information is handled with integrity, this is a great opportunity to join us as a Data Protection Practitioner. You’ll help the Council meet its statutory duties across Data Protection, Freedom of Information and Environmental Information Regulations, playing a vital role in protecting the public’s trust and supporting high‑quality decision‑making across the organisation.
About The Role
This is a dedicated Data Protection practitioner role, focused on delivering high‑quality operational data protection work. You will manage a range of information governance casework from start to finish, with a particular emphasis on subject access requests and data protection compliance. You’ll provide clear, confident advice to services, support colleagues in navigating complex legislation, and help embed good data protection practice across the Council. While the primary focus of the role is data protection, you may support the FOI team by picking up FOI or EIR casework when required. Your work will involve assessing risk, reviewing evidence, preparing professional correspondence and maintaining accurate records to ensure statutory duties and timescales are consistently met. A key aspect of the role is communicating data protection requirements clearly and confidently to colleagues at all levels across the Council, including designing and delivering training and awareness activity.
Key Responsibilities
* Act as an experienced Data Protection practitioner, managing complex and sensitive casework with minimal supervision.
* Lead the end‑to‑end handling of Subject Access Requests (SARs), including complex and sensitive cases, ensuring lawful decision‑making and compliance with statutory deadlines.
* Locate, retrieve and review information held across multiple systems to support SARs and other casework.
* Investigate and manage data protection breaches, including fact‑finding, risk assessment, mitigation actions and drafting clear outcomes and correspondence.
* Apply UK GDPR and Data Protection Act 2018 rights, exemptions and restrictions confidently.
* Provide practical, proportionate data protection advice to services on issues such as lawful basis, data sharing, retention, transparency and individual rights.
* Support and review Data Protection Impact Assessments (DPIAs), offering constructive challenge and guidance where appropriate.
* Draft, review or advise on data sharing agreements and information‑sharing arrangements.
* Provide data protection advice in relation to contracts and suppliers, including the use of appropriate contractual clauses.
* Manage FOI and EIR casework when required to support the FOI team.
* Prepare clear written responses, reports and case summaries suitable for audit, escalation or ICO scrutiny.
* Use iCasework to manage, analyse and record data protection casework accurately and defensibly.
* Use operational and case management systems and SharePoint to locate, retrieve, download, review, combine and convert information held across service areas to support SARs, breach investigations and other data protection work.
* Create, combine and redact documents, including producing clear and accurate PDF disclosures.
* Contribute to data protection training, guidance, templates, internal communications and awareness materials.
Work Arrangement
The role is an ‘any‑desk’ position. You will need to be connected to the network to access digital files and systems, whether from home or one of our offices. You’ll be required to attend the office for a minimum of two days per week, depending on role and team needs.
About You
You’ll bring strong practical experience of data protection work and enjoy applying legislation in a clear, solutions‑focused way. You’ll be comfortable working independently, making reasoned decisions and communicating confidently with a wide range of people across the Council.
Key Qualities
* A clear and confident communicator, able to explain complex legal or technical issues in plain language.
* Credible and assured when working with colleagues at all levels of the organisation, including senior officers.
* Highly organised and detail‑focused, with the ability to manage multiple statutory deadlines.
* Analytical and evidence‑based, with experience assessing risk and presenting well‑reasoned conclusions.
* Comfortable delivering training or briefings and responding confidently to questions.
Qualifications
* Significant hands‑on experience working in data protection or a closely related information governance role.
* Strong practical knowledge of UK GDPR and core data protection principles.
* Proven experience of managing Subject Access Requests, including complex or sensitive cases.
* Experience investigating and responding to data protection breaches.
* Experience delivering data protection training, briefings or awareness activity, or the confidence to develop and deliver this effectively.
* Strong technical skills, with the ability to locate, retrieve and manage information across multiple systems accurately and securely.
* Experience using case management systems, such as iCasework, to manage statutory casework and maintain defensible records.
* Confidence working with digital documents, including combining files, creating PDFs and applying accurate redactions.
* A working knowledge of SharePoint or similar document management systems.
* Knowledge or experience of FOI and EIR legislation is desirable, as the postholder may be required to support the FOI team by managing FOI cases when needed.
* NVQ Level 3 / HNC (or equivalent) as a minimum.
* The ability to converse effectively with the public in spoken English.
A full driving licence is desirable but not essential.
Contact Information
If you would like to find out more about the role, please contact Isa Jaye at [email protected].
Closing Date
Midnight on Monday 4th May
Interview Date
Week commencing 11th May
Legal Information
This post is exempt from the Rehabilitation of Offenders Act 1974 and therefore applicants are required to declare:
* All unspent convictions and conditional cautions.
* All spent convictions and adult cautions that are not protected (i.e. that are not filtered out) as defined by the Rehabilitation of Offenders Act 1974 (Exceptions) Order 1975 (as amended in 2020 and 2023).
Application Process
We understand that candidates may use AI tools to assist with their applications. While we welcome innovation, we expect all submissions to reflect your own experience, skills, and achievements accurately. Please ensure your application is truthful and demonstrates your personal capabilities, as this will be assessed during the selection process.
#J-18808-Ljbffr