Data Protection Assistant

Derbyshire County Council; East Midlands; On-site; GBP 28,000 - 36,000; Full time

Job summary

The Education Data Hub at Derbyshire County Council is inviting applications for a permanent role within the Data Protection for Schools Team. You will coordinate and process statutory and non-statutory information requests to help schools and MATs comply with UK GDPR and the Data Protection Act 2018.

Key duties include handling Subject Access Requests, FOI requests, data sharing, education records, police requests, and individual rights requests with care for confidentiality and accuracy.

Qualifications

• Experience handling sensitive data and implementing information governance principles.
• Proven ability to manage multiple information requests with accuracy and discretion.

Responsibilities

• SARs handling and timely data access
• FOIs facilitation under FOIA
• Data sharing requests governance
• Education record access management
• Police data requests handling
• Individual rights requests processing under UK GDPR

Skills

Attention to detail

Data protection

Communication skills

Information governance

Education

GDPR knowledge

Job description

Closing date: 13 September 2026

The Education Data Hub is recruiting to a permanent post within the Data Protection for Schools Team. This position offers an exciting opportunity to contribute to the delivery of high-quality data protection services for schools and multi-academy trusts (MATs) across the country.

The role focuses on the coordination and processing of statutory and non-statutory information requests. The postholder will play a key role in ensuring that client schools meet their legal obligations under UK GDPR and the Data Protection Act 2018.

Key responsibilities include supporting schools in the management of:

• Subject Access Requests (SARs) - ensuring individuals receive timely access to their personal data.
• Freedom of Information Requests (FOIs) - facilitating public access to non-personal information under the Freedom of Information Act.
• Data Sharing Requests - enabling secure and lawful exchange of data between organisations.
• Education Record Requests - managing access to pupil records in line with education legislation.
• Police Requests - responding to formal enquiries from law enforcement agencies.
• Individual Rights Requests - including requests for rectification, erasure, restriction, and objection under UK GDPR.

The role requires a methodical and organised approach, with the ability to manage multiple requests simultaneously, maintain confidentiality, and ensure timely and accurate responses. Strong communication skills are essential for liaising with schools, MATs, and other stakeholders. Attention to detail and a commitment to upholding data protection standards are also vital.

Experience in handling sensitive data and a thorough understanding of information governance principles are highly desirable.

The Education Data Hub is an award-winning, customer-focused traded service that brings together Data Protection, Cyber Security, Online Safety, IT for Schools and Data Management services for all educational settings. The team is committed to making a meaningful difference, and this role offers the chance to be part of that.

For further information regarding the post, please contact the Education Data Hub Operations Team Manager: Amy Blackwell [e-mail]

Closing Date: 13 September

Provisional Interviews: 21 September