QUALIFICATIONS

• In-depth knowledge of GDPR and other data protection legislation and a strong practical understanding of data protection law in practice
• Ability to clearly communicate practical and commercial data protection advice across a variety of business stakeholders
• Experience of working in data protection in a large organisation in the private sector
• CIPP/E or equivalent qualification desirable
• Practical working knowledge of global data protection laws
  Job Segment: Compliance, Database, Legal, Technolog

JOB PURPOSE

As one of two Data Privacy Advisors operating in the team you will be central to responding to a dynamic privacy landscape. The Data Protection Office is responsible for supporting the business in protecting our customer and employee’s personal data through established DPO processes, driving accountability across the business in order to protect Burberry’s brand and reputation, and to maintain customer and employee trust.

RESPONSIBILITIES

As the Data Privacy Advisor, you are responsible for the following activities:

• Understanding and documenting how the business handles personal data across all business functions, including HR, IT, Customer Service, Marketing and Digital.
• Supporting colleagues across the business to ensure that Burberry’s RoPA is maintained and updated.
• Managing personal data risks appropriately
• Helping project managers and stakeholders complete Privacy Impact Assessments, and advising on privacy by design requirements.
• Reviewing and overseeing data privacy compliance with new projects, systems and vendors.
• Working with Legal, Customer Service and HR to manage and respond to data subject requests across different business areas
• Proactively handling data privacy issues and ensuring that appropriate actions are taken in a timely manner.
• Managing data protection queries and complaints from customers, employees and other individuals
• Developing and delivering privacy-focussed online and face to face training and awareness sessions to employees across all levels of the business.
• Working with different business areas to understand their training needs.
• Developing engaging and innovative training and awareness materials
• Monitoring and reporting on data protection compliance across the organisation
• Reviewing, triaging and advising on data incidents, working closely with Legal
• Recording incidents on the breach register and supporting with follow-up actions