Data Protection & Privacy Compliance Lead

Volkswagen Group; Chalfont St Giles; On-site; GBP 45,000 - 65,000; Full time

Benefits offered by this job

Income protection

Life assurance (4x salary)

Retail discount vouchers

Cycle to work

Job summary

VWFS UK is seeking a knowledgeable Data Protection Specialist to support the Legal & Compliance Team in maintaining UK data protection compliance. You will advise on regulatory changes, support the DPO, and lead initiatives from DPIAs to breach oversight, acting as a key contact for DSARs and complaints.

The role requires strong collaboration with stakeholders across the business, robust regulatory understanding, and a commitment to continuous improvement in privacy and risk management.

Qualifications

• Proven data protection advisory experience in Compliance/Legal.
• Strong understanding of ICO guidance and regulatory expectations.

Responsibilities

• Advise on UK Data Protection laws and regulatory changes.
• Maintain Registers of Processing Activities (ROPA).
• Assist with Data Protection Impact Assessments (DPIA).
• Lead data breach oversight and MI reporting to senior forums.
• Serve as primary contact for DSARs, complaints, and litigation matters.
• Develop second-line monitoring to ensure compliance and drive improvements.
• Coordinate with ICO on investigations and inquiries.
• Collaborate with Legal & Compliance across the business.
• Drive continuous improvement in data protection and efficiency.

Skills

Data protection guidance

DPIA

ROPA

DSAR handling

Stakeholder engagement

Regulatory reporting

Job description

VWFS UK is seeking a knowledgeable Data Protection Specialist to support the Legal & Compliance Team in maintaining UK data protection compliance. You will advise on regulatory changes, support the DPO, and lead initiatives from DPIAs to breach oversight, acting as a key contact for DSARs and complaints.

The role requires strong collaboration with stakeholders across the business, robust regulatory understanding, and a commitment to continuous improvement in privacy and risk management.