Data Protection & SAR Support Officer (Hybrid)

Gordon Yates Recruitment Consultancy; Greater London; Hybrid; GBP 23,000 - 24,000; Part time

Benefits offered by this job

Hybrid working

Job summary

Gordon Yates Recruitment Consultancy seeks a Data Protection Support Officer to assist with Subject Access Requests for a not-for-profit media group in Central London. The role is hybrid for 3–4 weeks, with a pay rate of £16.71–£17.48 per hour dependent on experience.

You will support the Records and Information Governance team, ensuring statutory timescales are met and complex issues escalated as needed. Strong knowledge of UK GDPR and data handling is essential.

Qualifications

• Experience handling Subject Access Requests (SARs).
• Strong knowledge of UK GDPR and the Data Protection Act 2018.
• Experience reviewing/redacting records containing personal data.
• Proficiency with Microsoft 365, eDiscovery or similar tools.
• Ability to work independently and manage short-term workloads.

Responsibilities

• Support management of allocated Subject Access Requests from receipt to response within statutory timescales.
• Liaise with colleagues to gather information for disclosure.
• Log requests, update SAR trackers, monitor deadlines and maintain case notes.
• Apply exemptions and carry out redactions in line with Data Protection legislation.
• Prepare disclosure material and review documentation for approval.
• Maintain accurate records of requests, decisions, and correspondence.

Skills

Attention to detail

Discretion

Judgement

Independent working

Prioritising workload

Meeting deadlines

Microsoft 365

eDiscovery tools

Tools

Microsoft 365

Microsoft eDiscovery

Job description

Gordon Yates Recruitment Consultancy seeks a Data Protection Support Officer to assist with Subject Access Requests for a not-for-profit media group in Central London. The role is hybrid for 3–4 weeks, with a pay rate of £16.71–£17.48 per hour dependent on experience.

You will support the Records and Information Governance team, ensuring statutory timescales are met and complex issues escalated as needed. Strong knowledge of UK GDPR and data handling is essential.