Data & GDPR Officer Remote wide as meetings and events Corporate Services

Remote with occasional UK-wide travel as required for meetings and events

Corporate Services

Full time

Permanent

The Data & GDPR Officer is responsible for ensuring our donor, beneficiary, and volunteer data is managed efficiently, accurately, and in strict compliance with data protection laws.

Reporting to the Head of Salesforce & IT, this role bridges the gap between privacy compliance and practical database stewardship. You will champion data quality, build compliant reporting workflows, ensure regulatory compliance across fundraising activities, and help maximise the impact of our Salesforce CRM while protecting the rights of our supporters, beneficiaries and volunteers.

• Consent Architecture: Audit and maintain robust consent and communication preference structures within Salesforce to ensure absolute compliance with UK GDPR and PECR.
• Fundraising Compliance: Ensure all digital marketing and direct mail comply with the Fundraising Regulator's Code of Fundraising Practice.
• Data Subject Rights
  :
  Manage the end-to-end processing of Subject Access Requests (SARs) and Right to be Forgotten requests, coordinating data extraction and erasure directly within Salesforce and connected systems.
• DPIAs & Third-Party Risks: Conduct Data Protection Impact Assessments (DPIAs) for new Salesforce integrations, third-party fundraising apps (e.g., Just Giving), and external vendors.
• Breach & Incident Tracking: Log, investigate, and manage data incidents or potential breaches, escalating critical issues to senior leadership and regulatory bodies if necessary.
• Compliant Report Building: Design, build, and maintain standard and custom Salesforce reports and dashboards for fundraising, marketing, bereavement services and operational teams.
• Data Selection & Segmentation: Create complex, compliant data selections within Salesforce, verifying that opt-in preferences are accurately filtered out before lists are exported or synced with marketing platforms.
• Data Quality Reporting: Establish regular data-quality monitoring reports and exception dashboards in Salesforce to identify and flag incomplete records, missing consent fields, or formatting errors.
• Trend Analysis: Provide data insights and reporting on donor retention, communication opt-out trends, and Subject Access Request (SAR) metrics to help inform data strategy and compliance health.
• Donor Data Uploads: Manage the scheduled and ad-hoc import of donor donations, and volunteer datasets from multiple external income streams into Salesforce.
• Data Quality & Hygiene: Monitor and improve database health by running regular deduplication, validation, and address-cleaning routines within Salesforce.
• Data Standards & Documentation: Maintain the organisation's data dictionary, fields/objects mapping, and Records of Processing Activities (ROPA).
• Retention & Lifecycle Management: Enforce the charity's data retention policies, overseeing the automation or manual archival and secure deletion of expired legacy, donor, and beneficiary data.
• Compliant List Management: Collaborate with fundraising, bereavement and marketing teams to build compliant data selections, reports, and dashboards in Salesforce without risking privacy drift.

• Contribute to the vision and mission of Child Bereavement UK; whilst embedding the values into your daily work activities.
• Promote equality of opportunity and diversity in accordance with Child Bereavement UK policy.
• Contribute to the overall success of the charity’s fundraising needs by providing case studies, attending events and adding value to the experience of our supporters as required.
• Contribute to the brand and reach of the charity by working alongside our Marketing & Communications…