The Data Rights Manager is central to the Group's commitment to protecting personal data and complying with the UK GDPR, the Data Protection Act 2018 and evolving legislation, including the Data Use and Access Act 2025. The person in post will support the delivery of a robust, evolving data protection compliance programme regulated by the Information Commission and aligned to the Group's values.
The role holder will lead a specialist team responsible for receiving, verifying and responding to data protection rights requests from customers and their representatives, ensuring all requests are managed accurately and within strict statutory timeframes. Effective workload management and oversight will be essential to maintaining service quality and regulatory compliance.
This role will also oversee complex and highly sensitive information requests from employees, former employees, contractors and applicants. The role holder will ensure investigations and responses are handled with empathy, professionalism and discretion, supporting the team through challenging and often contentious cases.
As a key part of the Group's personal data risk management framework, this role will identify emerging trends, provide regular reporting and empower the team to research and resolve complex issues. By doing so, the role protects the Group from regulatory action, financial penalties, reputational damage and loss of trust.
This ...