Data Privacy Manager

Location: Central London (Regent's Place, NW1) Hybrid - 4 days in office.

Reporting to: Gavin Bergin - Director of Governance (and DPO)

Type of Contract: Permanent

The Data Privacy Manager is responsible for the delivery of the Privacy programme at British Land. Reporting into the Director of Governance (also the DPO), they will coordinate business wide activities and disseminate SME knowledge as needed to ensure compliance with British Land's legal and regulatory data protection obligations.

This role works with a wide range of internal and external stakeholders to oversee the Privacy programme. It is supported by the DPO as a point of escalation and the Records Officer, a member of the wider Governance function, also provides administrative support.

Key responsibilities include:

• Running the Data Privacy programme at British Land.
• Providing privacy subject matter expertise, to ensure the organization is compliant with data privacy legislation.
• Monitoring compliance with the GDPR, the Data Protection Act 2018 and other relevant data protection regulations across the business.
• Managing the budget for Data Privacy and spend with external legal advisers as required.
• Providing advice regarding the implications of new privacy and data protection laws that impact the business.
• Creating and maintaining data protection notices, policies, standards and guidance to ensure the continued reflection and support of British Land's changing services, business models, evolving use of data, expanding markets, and changes in applicable laws and regulations.
• Promoting a culture of privacy by design by advocating for the development, review and/or revision of policies, guidelines, projects, processes and/or programs relating to privacy and data protection.
• Completing and maintaining Privacy Impact Assessments and, where triggered, Data Protection Impact Assessments.
• Working with Information Security in completing Supplier Risk Assurance reviews.
• Managing relationships with suppliers who provide tools and services used for the operation of the British Land Data Privacy function.
• Providing assistance to the Procurement team in relation to Data Sharing Agreements and contracts.
• Create and maintain the organisation's ICO registrations and fee payments.
• Supporting and monitoring the maintenance of Records of Processing.
• Maintaining the process, tool and providing advice and training to staff across the business who handle Data Subject Rights Requests, while also managing larger employment related Data Subject Access Requests with HR.
• Providing advice and guidance on data protection requests from third parties.
• Liaising with customers and employees who have raised concerns about how their individual rights request has been managed.
• Investigating data breaches along with Information Security and collaborating with the business units to identify remedial actions and monitor successful implementation.
• Developing and delivering ongoing training and awareness activities to maintain a strong data protection awareness within British Land.
• Defining, planning and executing privacy audits in relation to processing activities, including supporting and monitoring the successful implementation of any remedial actions identified.
• Preparing reports on the state of data privacy compliance for senior management.

We are looking for an individual who is highly motivated, pragmatic and can successfully deliver at pace.

• A passion for data protection and experience of advising on the application of privacy legislation and the management of privacy risk.
• A good understanding of UK data protection legislation and relevant applicable guidelines.
• Experience of drafting and reviewing data protection clauses for contracts and advising the business on these.
• CIPP/E certification.
• The ability to consider the risks to the business and pragmatically agree an appropriate way forward.
• Good interpersonal skills and the ability to build relationships with the business to become a trusted advisor.
• Strong verbal and written communication skills with excellent attention to detail.
• Effective time management, prioritisation skills, ability to manage multiple workstreams.
• Thrives on taking on new challenges while understanding the importance of completing day to day tasks.
• A pro-active approach to managing risk.
• Able to work confidently and autonomously where required, while recognising when to ask for direction.
• Enjoys working in a fast-paced environment with competing deadlines.
• Strong IT proficiency, in particular with Word, Excel, Outlook and Sharepoint.