Data Protection Coordinator

Catch22

1d•Remote

About The Position

Catch22 is seeking a detail-oriented Data Protection Coordinator to support the Data Protection Officer (DPO) in ensuring compliance with data protection laws. This role involves coordinating Data Protection activities across Catch22, providing guidance and support to services and stakeholders, and managing various data protection processes. The ideal candidate will have a strong understanding of UK Data Protection Legislation and regulatory expectations, excellent attention to detail, and the ability to manage priorities and deadlines effectively.

Requirements

Awareness of regulatory expectations and guidance (e.g. ICO guidelines)
Awareness of UK Data Protection Legislation
A non-judgmental attitude with an understanding of Catch22's mission.
Experience in managing or supporting Subject Access Requests.
Experience working independently, managing competing priorities, and meeting deadlines.
Strong attention to detail and ability to handle sensitive and confidential information appropriately.
Ability to build effective working relationships with stakeholders at all levels.
Open to learning and expanding on knowledge in the UK Data Protection sector.

Responsibilities

Act as a key point of contact for data protection queries, providing practical advice and resolving issues independently, escalating to the DPO where appropriate.
Manage the Data Protection Team mailbox, triaging, responding to queries, prioritizing workload, and escalating high-risk or complex matters.
Manage data protection incidents end-to-end, including risk assessment, action identification, and escalation of high-risk incidents.
Manage and maintain the Data Subject Rights log, ensuring accurate recording, monitoring, and timely completion of requests.
Coordinate and manage data subject rights requests, applying judgment to complex cases and identifying necessary escalations.
Manage Subject Access Requests end-to-end, including acknowledgement, identity verification, stakeholder engagement, information gathering, secure data handling, and compliant disclosure.
Advise stakeholders on Data Protection Impact Assessments (DPIAs), including when they are required and supporting their completion.
Manage and prioritize workload to meet statutory and organizational deadlines, identifying risks and recommending actions.
Provide clear, practical advice and guidance on data protection requirements to stakeholders.
Contribute to the development and continuous improvement of data protection processes, procedures, and the data protection management system.
Advise stakeholders on the development and review of service-specific privacy notices.
Identify and prioritize emerging data protection risks or issues, supporting the Data Protection Officer in rectification.