Data Privacy Co-Ordinator

The following content displays a map of the jobs location - Liverpool

• 10% store discount at all our retail stores
• Stream - access to flexible pay, financial wellbeing support, exclusive colleague discounts, savings opportunities, and much more.
• MyHB colleague benefits platform with access to:
  • Discounts UK wide on retail, leisure, hospitality venues
  • Employee Assistance Programme with 24/7 confidential counselling and advice line
  • Completely confidential services to you.
  • Low-cost voluntary insured health cash plans and cancer cover

We have an exciting opportunity for a Data Privacy Co-ordinator to join our Head Office team in Liverpool.

As our business continues to grow, protecting personal data and maintaining the trust of our colleagues, customers and stakeholders has never been more important. This role is at the heart of ensuring we meet our legal obligations while delivering a professional and efficient service to individuals exercising their data protection rights.

Working across a wide range of business functions, you will manage Data Subject Rights Requests, provide expert guidance on data protection matters and support the ongoing development of our privacy compliance framework. If you have a strong understanding of UK data protection legislation, enjoy managing complex cases and can build effective relationships across a large organisation, we'd love to hear from you.

• Manage and coordinate Data Subject Rights Requests, ensuring they are handled accurately, fairly and within statutory timescales.
• Process a range of individual rights requests, including access, rectification, erasure, restriction, portability and objections.
• Support the management of data protection complaints and enquiries from third-party Data Controllers.
• Assess the scope of requests and identify the relevant personal data held across the organisation.
• Work with teams across Retail Operations, Customer Services, Human Resources, IT, Loss Prevention and Legal to gather the required information.
• Review information to ensure it is complete, relevant and legally compliant.
• Work with subject matter experts to apply appropriate red actions to protect third-party information and confidential business data.
• Prepare clear and accurate responses for individuals within regulatory deadlines.
• Maintain detailed records of requests, correspondence, outcomes and response times.
• Provide practical guidance to colleagues on data protection responsibilities and Data Subject Rights procedures.
• Support the maintenance of accurate and compliant Records of Processing Activities.
• Monitor regulatory developments and recommend improvements to policies, processes and controls.
• Produce compliance reports and management information covering request volumes, trends, response times and recurring issues.
• Support internal audits, regulatory inspections and privacy governance activities.
• Identify opportunities to improve workflows, systems, templates and privacy management tools.
• Contribute to data protection awareness, training and guidance materials across the business.

To be successful in this role, you will bring:

• Experience managing or coordinating Data Subject Rights Requests, including Subject Access Requests, within a large, fast-paced organisation.
• Good working knowledge of the UK GDPR, Data Protection Act 2018 and PECR.
• A practical understanding of data protection principles and individuals' rights, with the ability to apply legislation proportionately.
• Experience handling highly sensitive and confidential information with discretion.
• Strong administrative, organisational and case management skills, with excellent attention to detail.
• Experience building effective working relationships across multiple departments and stakeholders.
• Confident using Microsoft Office and case management systems, with the ability to produce accurate reports and maintain detailed records.
• Experience reviewing and redacting information to protect personal data and confidential business information.

It would be advantageous if you also have:

• A recognised data protection qualification, such as PC.dp, BCS or IAPP.
• Experience handling complaints relating to data protection or privacy.
• Knowledge of HR processes and the handling of employee data.
• An understanding of CCTV data processing and the associated privacy risks and compliance requirements.