Data Protection Rights Case Officer

Financial Conduct Authority; Greater London; On-site; GBP 39,000 - 52,000; Full time

Benefits offered by this job

25 days annual leave

Non-contributory pension (8–12%) and 8

Private healthcare with Bupa

Job summary

Financial Conduct Authority seeks a candidate for the Information Rights team within the Communications division. The role focuses on handling Data Subject Access Requests under UK GDPR and related acts, ensuring timely, compliant disclosures and clear communication with stakeholders.

You will liaise with different FCA areas, apply exemptions, and stay updated on evolving information rights practices, with SC clearance required for the role.

Qualifications

• Experience handling Data Protection Rights requests under UK GDPR and Data Protection Act 2018.
• Ability to apply ICO guidance and organisational policies to make defensible decisions.
• Strong written and verbal communication to explain complex issues clearly.

Responsibilities

• Handle Data Subject Access Requests and information rights requests within UK GDPR and FCA policies.
• Review and prepare disclosed information, applying exemptions and redactions as needed.
• Coordinate with business areas to obtain information and ensure timely responses.
• Draft clear written responses to requesters and stakeholders.

Skills

Data protection rights

UK GDPR knowledge

Effective written communication

Time management

Tools

Redaction software

Job description

• Salary: National (Edinburgh and Leeds) ranging from £39,100 to £48,800 and London from £41,600 to £51,900 (salary offered will be based on skills and experience)
• This role is graded as: Associate, L8, Corporate
• Your external recruitment contact is Raimonda via [e-mail]
• Your internal recruitment contact is Fizah via [e-mail]

Division: Operations - Communications

Department: Communications

We regulate financial services firms in the UK, to keep financial markets fair, thriving and effective. By joining us, you’ll play a key part in protecting consumers, driving economic growth and shaping the future of UK finance services.

Information Disclosure Team who sits within Communications are responsible for managing UK GDPR Rights Requests such as subject access requests alongside Freedom of Information Act (FOIA), UK GDPR and other transparency initiatives such as the Environmental Information Regulations and Re-use of Public Sector Information Regulations. The team plays a key role in helping the FCA meet its statutory obligations, supporting our transparency agenda and ensuring compliance with information rights legislation. This role is critical in managing legal, regulatory and reputational risk, as failure to meet statutory deadlines could result in action from the Information Commissioner's Office (ICO) and impact confidence in the FCA as a regulator.

Role Responsibilities

• This role focuses on handling Data Subject Access Requests and other information rights requests, rather than general data protection compliance activities
• Handle Subject Access Requests and other information rights requests in line with the UK GDPR, Data Protection Act 2018, FCA policies and procedures, managing a caseload effectively and meeting statutory deadlines
• Review, assess and prepare information for disclosure, including identifying relevant records, applying appropriate exemptions and carrying out redactions where necessary
• Liaise with business areas across the FCA to obtain information, provide guidance, build effective working relationships and ensure responses are accurate and delivered on time
• Draft clear written responses to requesters and other stakeholders, explaining complex information in a straightforward and accessible way
• Keep up to date with developments in data protection law, ICO guidance and information rights best practice, sharing knowledge, delivering training and raising awareness across the organisation
• Support evolving team priorities, including Freedom of Information requests and executive correspondence, demonstrating a collaborative and flexible approach

Skills Required

Minimum

• Experience of handling Data Protection Rights requests, including Data Subject Access Requests, under the UK GDPR and Data Protection Act 2018
• Experience of applying legislation, ICO guidance and organisational policies to make sound and defensible decisions
• Effective written and verbal communication skills, with the ability to explain complex issues clearly and accurately to a range of audiences
• Demonstrated ability to handle several competing tasks and meet deadlines consistently

Essential

• Demonstrated ability to manage a high-volume caseload, consistently meeting statutory and internal deadlines
• Experience of reviewing large volumes of information and preparing accurate, high-quality disclosures, including the use of redaction software and other disclosure tools
• Thorough attention to detail and sound judgement when reviewing information, applying exemptions and drafting responses
• Demonstrated stakeholder management skills, with experience of providing clear, practical advice and working collaboratively across teams, business areas and senior stakeholder groups
• Demonstrated ability to work with minimal supervision while contributing positively to a collaborative, values-led environment where professionalism, accountability and teamwork lead to successful outcomes
• SC Clearance is required for this role. You will hold, or be required to obtain, Security Check (SC) level vetting

Benefits

• 25 days annual leave plus bank holidays
• Non-contributory pension (8–12% depending on age) and life assurance at eight times your salary
• Private healthcare with Bupa, income protection and 24/7 Employee Assistance
• 35 hours of paid volunteering annually
• Colleagues spend a minimum of 50% of their working time in the office each month (60% for Directors and Executive Directors) across our London, Leeds and Edinburgh offices. A flexible benefits scheme designed around your lifestyle

Our values and culture

Our colleagues are the key to our success as a regulator. We are committed to fostering a diverse and inclusive culture: one that’s free from discrimination and bias, celebrates difference and supports colleagues to deliver at their best. We believe that our differences and similarities enable us to be a better organisation – one that makes better decisions, drives innovation and delivers better regulation.

If you require any adjustments due to a disability or condition, your recruiter is here to help - reach out for tailored support.

We welcome diverse working styles and aim to find flexible solutions that suit both the role and individual needs, including options like part-time and job sharing where applicable.

Disability confident: our hiring approach

We’re proud to be a Disability Confident Employer and therefore, people or individuals with disabilities and long-term conditions who best meet the minimum criteria for a role will go through to the next stage of the recruitment process. In cases of high application volumes we may progress applicants whose experience most closely matches the role’s key requirements.

Useful information and timelines

Timeline

• Job advert closes: Midnight, 24 September 2026
• CV Review/Shortlist: 28 September 2026
• Interview: from the 09th October moving forward
• Your Recruiter will discuss the process in detail with you during screening for the role, therefore, please make them aware if you are going to be unavailable for any date during this time