Interim GDPR & Data Protection Lead

Allen Lane; Greater London; Hybrid; GBP 60,000 - 90,000; Part time

Job summary

Allen Lane are partnering with a not-for-profit organisation to recruit an interim Data Protection Manager for a 3-6 month contract inside IR35, hybrid working with 1-2 days on site in London.

You will lead GDPR compliance, map data flows, update policies, and support DPIAs across fundraising and operations, acting as the primary point of contact for data subject access requests and data protection incidents.

Qualifications

• Strong working knowledge of UK GDPR, the Data Protection Act 2018 and PECR.

Responsibilities

• Carry out a full GDPR compliance audit and identify gaps, producing a formal report.
• Propose and implement remedial actions from the audit.
• Overhaul data protection documentation, producing a revised Data Protection Policy.
• Ensure data flows are mapped and DPIAs are created where appropriate.
• Review data protection requirements in relation to systems, suppliers, contracts and data sharing arrangements.
• Identify training needs and develop fit-for-purpose training on operational GDPR aspects including DPIAs.
• Work with the Fundraising team to ensure fundraising practices are compliant and support data policy if appropriate.
• Act as the first point of contact for all data subject access requests.

Skills

GDPR compliance

DPA 2018

PECR

Job description

Allen Lane are partnering with a not-for-profit organisation to recruit an interim Data Protection Manager for a 3-6 month contract inside IR35, hybrid working with 1-2 days on site in London.

You will lead GDPR compliance, map data flows, update policies, and support DPIAs across fundraising and operations, acting as the primary point of contact for data subject access requests and data protection incidents.