Data Protection Partner

British Gymnastics; Telford; Hybrid; GBP 21,000 - 35,000; Full time

Job summary

British Gymnastics is seeking a Data Protection Partner to embed and maintain a robust data protection framework across the organisation. Working with the Governance Lead, external DPO and colleagues, you will provide practical advice, coordinate compliance activities and help ensure compliance with UK data protection legislation.

The role offers 37 hours per week, a hybrid dual-site role from Lilleshall National Sports Centre, Shropshire and home-based work, with salary up to £35,000 depending

Qualifications

• Experience supporting data protection compliance activities such as DPIAs, Subject Access Requests, records management or breach handling.
• A good understanding of UK GDPR, the Data Protection Act 2018 and wider data protection principles.
• Strong analytical skills with attention to detail and a methodical approach.
• Ability to manage multiple priorities and maintain accurate records, audit trails and case documentation.
• Clear, practical communication of data protection requirements to stakeholders.
• Experience developing reports, policies or guidance notes.
• Proficiency with Microsoft 365 applications.
• Ability to interpret legislation and apply it pragmatically across teams.
• Collaborative approach and relationship-building across functions.
• High integrity, discretion and professionalism with confidential information.

Responsibilities

• Act as a key contact for day-to-day data protection queries with practical guidance.
• Manage relationship with external DPO and escalate higher risk matters.
• Lead on complex data protection queries and support risk-based decisions on personal data.
• Coordinate and support DPIAs for new projects and systems.
• Maintain records of processing activities and data protection registers.
• Handle data subject rights requests ensuring accurate, timely responses.
• Coordinate investigations into personal data breaches and implement lessons learned.
• Review data processing agreements and support supplier assurance activities.
• Develop and deliver data protection training and awareness activities.
• Produce data protection metrics and insights for senior leaders.

Skills

Data protection compliance

UK GDPR knowledge

Analytical skills

Records management

Stakeholder communication

Documentation/reporting

Microsoft 365 proficiency

Legislation interpretation

Collaboration

Integrity & discretion

Tools

Microsoft 365

Job description

Gymnastics isn’t just a sport—it’s a powerful force for change.

We believe in the power of gymnastics to change lives, enrich communities, and deliver an uplifting gymnastics experience for all across the UK.

At the heart of this are the people who make up the gymnastics community – gymnasts, parents, coaches, clubs, officials and volunteers – working together in communities across the country. As the national governing body for gymnastics in the UK, we work in partnership with our members to lead, support and inspire, helping to shape a bright future for our sport.

Our vision, Leap Without Limits, is underpinned by the values of being Aspirational, Supportive and Inclusive. Together, we’re building a sport where everyone feels welcomed, encouraged and able to thrive. This role is an important part of making that vision a reality.

The Opportunity

We are looking for a Data Protection Partner to play a pivotal role in embedding and maintaining a robust data protection framework across the organisation. Working closely with our Governance Lead, external Data Protection Officer (DPO) and colleagues across all departments, you will provide practical advice, coordinate compliance activities and help ensure we meet our obligations under UK data protection legislation.

This is an excellent opportunity for someone with data protection experience who enjoys balancing compliance, stakeholder engagement and continuous improvement. You will have the chance to influence organisational practices, support meaningful projects and contribute to creating a safe, inclusive and well governed environment for our members, clubs, colleagues and wider gymnastics community.

Main responsibilities

The main responsibilities of the role are:

• Act as a key point of contact for day to day data protection queries, providing practical advice and guidance across the organisation.
• Manage the relationship with our external Data Protection Officer (DPO), ensuring effective collaboration and appropriate escalation of higher risk matters.
• Lead on more complex data protection queries, supporting managers and stakeholders to make informed, risk based decisions on the handling of personal data.
• Coordinate and support Data Protection Impact Assessments (DPIAs) for new projects, systems and organisational initiatives.
• Maintain records of processing activities, data protection registers and other accountability documentation to demonstrate compliance.
• Manage the handling of data subject rights requests, including Subject Access Requests, ensuring responses are accurate and timely.
• Coordinate investigations into personal data breaches, maintain incident records, identify lessons learned and support preventative actions.
• Review data processing agreements and support supplier assurance activities to ensure appropriate controls are in place.
• Develop and deliver data protection training, awareness activities and support networks that promote a positive data protection culture.
• Produce meaningful data protection metrics, reports and insights for senior leaders and governance forums to support effective decision making.

About you

We’re looking for someone who can demonstrate:

• Experience supporting data protection compliance activities such as DPIAs, Subject Access Requests, records management or breach handling.
• A good understanding of UK GDPR, the Data Protection Act 2018 and wider data protection principles.
• Strong analytical skills with excellent attention to detail and a methodical approach to work.
• The ability to manage multiple priorities and maintain accurate records, audit trails and case documentation.
• Confidence communicating data protection requirements to a range of stakeholders in a clear and practical way.
• Experience developing reports, policies, guidance notes or other written documentation.
• Strong organisational and administration skills, together with proficiency in Microsoft 365 applications.
• The ability to interpret legislation, guidance and policy, applying these in a proportionate and pragmatic manner.
• A collaborative approach and experience building effective working relationships across teams and functions.
• High levels of integrity, discretion and professionalism when handling confidential and sensitive information.

Salary: up to £35,000 dependent upon experience

Hours: Full time, 37 hours per week

Location: This is a dual based role working from Lilleshall National Sports Centre, nr Newport, Shropshireand from home