Data Protection Partner - Remote

British Amateur Gymnastics Association

3d•Remote

About The Position

The Data Protection Partner will help embed and maintain a robust data protection framework across the organisation. Working closely with the governance lead, the external Data Protection Officer (DPO) and colleagues across departments, the role provides practical advice, coordinates compliance activities and supports compliance with UK data protection legislation. The position contributes to responsible data management and a safe, inclusive and well-governed environment for the organisation’s members, clubs, colleagues and wider gymnastics community. This is a remote position. The successful candidate is expected to attend quarterly team days, held four times a year at Lilleshall National Sports Centre near Newport, Shropshire. Applicants must have the right to work in the UK for the duration of employment; visa sponsorship is not available.

Requirements

Experience supporting data protection compliance activities, such as DPIAs, Subject Access Requests, records management or breach handling.
A good understanding of UK GDPR, the Data Protection Act 2018 and wider data protection principles.
Ability to prepare data protection metrics and management information, such as DSAR volumes, breach trends, DPIA status and training completion, to support Board reporting.
Relevant practical experience supporting core data protection processes, such as DPIAs, records of processing activities (ROPA) maintenance, data subject requests and personal data breach management, or demonstrable ability to learn these quickly.
Strong organisational and administration skills, and proficiency in Microsoft 365 applications.
High levels of integrity, discretion and professionalism when handling confidential and sensitive information.
Strong analytical skills, excellent attention to detail and a methodical approach to work.
Ability to manage multiple priorities and maintain accurate records, audit trails and case documentation.
Confidence communicating data protection requirements clearly and practically to a range of stakeholders.
Experience developing reports, policies, guidance notes or other written documentation.
Ability to interpret legislation, guidance and policy and apply them proportionately and pragmatically.
Collaborative approach and experience building effective working relationships across teams and functions.
Appropriate right to work in the UK for the duration of employment.

Responsibilities

Act as a key point of contact for day-to-day data protection queries, providing practical advice and guidance across the organisation.
Manage the relationship with the external Data Protection Officer (DPO), ensuring effective collaboration and appropriate escalation of higher-risk matters.
Lead on complex data protection queries and support managers and stakeholders in making informed, risk-based decisions about handling personal data.
Coordinate and support Data Protection Impact Assessments (DPIAs) for new projects, systems and organisational initiatives.
Maintain records of processing activities, data protection registers and other accountability documentation.
Manage data subject rights requests, including Subject Access Requests, ensuring accurate and timely responses.
Coordinate investigations into personal data breaches, maintain incident records, identify lessons learned and support preventative actions.
Review data processing agreements and support supplier assurance activities to ensure appropriate controls are in place.
Develop and deliver data protection training and awareness activities, and support networks that promote a positive data protection culture.
Produce data protection metrics, reports and insights for senior leaders and governance forums to support decision-making.