Data Protection Manager

About The Role

RAC has an exciting opportunity for a Data Protection Manager to join our Governance, Risk & Compliance team, supporting data protection and privacy across the Group.

This is a highly visible role in a fast-paced environment, where you’ll provide expert guidance and oversight to ensure compliance while enabling the business to use data responsibly. Working closely with Legal, Information Security, Risk and business teams, you’ll play a key role in managing risk, strengthening governance, and embedding a strong data protection culture across RAC.

This is more than a standard compliance role. You’ll have real ownership, the opportunity to take on greater responsibility, and exposure across senior stakeholders and governance forums. If you’re someone who enjoys solving problems, driving improvements, and is keen to grow your career, potentially towards a future DPO role—this is a fantastic opportunity to make your mark!

• Ensure compliance with UK GDPR, DPA 2018 and PECR
• Maintain and evolve data protection frameworks, policies and controls
• Monitor performance and report on data protection risks
• Oversee Records of Processing Activities (ROPAs)

• Provide clear, pragmatic data protection advice to stakeholders
• Support projects with privacy by design and default
• Advise on data use, sharing, retention and transfers
• Act as a key contact for privacy-related queries across the business

• Oversee SARs and other data subject requests
• Ensure timely, high-quality and compliant responses
• Manage complaints and escalations with confidence

• Manage personal data breaches and incidents end-to-end
• Assess notification requirements (ICO and individuals)
• Support investigations, remediation and learning

• Lead and review DPIAs
• Identify, assess and mitigate privacy risks
• Ensure appropriate governance of higher-risk processing

• Support data sharing agreements and safeguards
• Review supplier and partner data protection clauses
• Manage third-party data protection risk

• Support ICO engagement, audits and enquiries
• Deliver training and promote awareness across the business
• Identify issues, fix them, and drive continuous improvement

• Strong knowledge of UK GDPR, DPA 2018 and PECR
• Experience in a data protection, privacy or compliance role
• Hands-on experience with SARs, breaches and DPIAs
• Ability to translate regulation into practical, business-friendly guidance
• Strong stakeholder management across legal, risk, IT and business teams
• Ability to take ownership and manage competing priorities effectively

• Confident, proactive and solution-focused
• Strong analytical and problem-solving skills
• Clear communicator with the ability to influence at all levels
• Commercial and pragmatic approach to risk
• Comfortable handling sensitive issues and driving outcomes
• Ambitious, with a desire to learn, grow and take on more responsibility

• CIPP/E, CIPM or equivalent (desirable)
• Legal or compliance background advantageous

This role follows a hybrid model, 2 days in our Bradley Stoke, Bristol office and 3 remote.

Salary aligned with market and experience.

Enjoy a competitive salary plus automatic enrolment in our Owning It Together Colleague Share Scheme, giving you a unique opportunity to share in RAC’s future success.

Get started with a free RAC Ultimate Complete Breakdown Service from day one, plus access to a car salary sacrifice scheme (including electric vehicles) after 12 months, delivering serious tax savings.

Enjoy 25 days annual leave, plus bank holidays. We also support work–life balance with paid family leave, flexible schedules and practical resources to help navigate personal commitments.

Benefit from a pension scheme with up to 6.5% matched contributions alongside life assurance cover of 4 times salary (10 times optional with flex benefits),…