Data Protection Officer | GDPR & Privacy Strategy Lead

Adler & Allan; Harrogate; On-site; GBP 50,000 - 75,000; Full time

Job summary

Adler & Allan, a leading environmental services business, is seeking a Data Protection Officer to lead data protection compliance across the Group. Reporting to the Legal Counsel, you will act as the subject matter expert on data privacy and drive compliance initiatives.

You will manage GDPR/PECR compliance, handle SARs, conduct DPIAs, deliver training, and maintain registers. You will liaison with the ICO and report updates to senior stakeholders, shaping data protection practices across the

Qualifications

• Proven experience in a Data Protection, Privacy or Compliance role.
• Strong knowledge of GDPR, PECR and UK data protection legislation.
• Experience conducting privacy audits, risk assessments and DPIAs.

Responsibilities

• Lead and manage data protection compliance across the Group.
• Ensure compliance with GDPR, PECR and UK data protection legislation.
• Manage and respond to Subject Access Requests (SARs).
• Conduct Data Protection Impact Assessments (DPIAs).
• Deliver training and guidance to stakeholders across the business.
• Manage supplier compliance with data protection requirements.
• Conduct regular audits and privacy risk assessments.
• Support the management and reporting of data protection incidents and breaches.
• Maintain SAR, incident and compliance registers.
• Produce reports and compliance updates for senior stakeholders.
• Act as the key point of contact for the ICO.

Skills

GDPR expertise

Privacy governance

Stakeholder mgmt

Data breach response

DPIA execution

SAR handling

Audit & risk assessment

Training & awareness

ICO liaison

Commercial compliance

Job description

Adler & Allan, a leading environmental services business, is seeking a Data Protection Officer to lead data protection compliance across the Group. Reporting to the Legal Counsel, you will act as the subject matter expert on data privacy and drive compliance initiatives.

You will manage GDPR/PECR compliance, handle SARs, conduct DPIAs, deliver training, and maintain registers. You will liaison with the ICO and report updates to senior stakeholders, shaping data protection practices across the