Data Protection Officer

at  Sykes Cottages

ESSENTIAL EXPERIENCE:

• Extensive data privacy experience.
• Excellent knowledge of, and significant experience in applying, UK and EU data privacy laws.
• Proven experience in a senior data protection or compliance role.
• Expertise in conducting Data Protection Impact Assessments (DPIAs) and advising on data protection by design.
• Managing the Subject access request process
• Strong understanding of cybersecurity and data privacy protocols to secure personal data.
• Experience managing data breach responses and audits.
• Strong communication and interpersonal skills, able to convey complex data privacy principles to non-technical audiences.
• Analytical mindset with a keen eye for detail and the ability to identify and mitigate data-related risks.

ABOUT US

The Forge Holiday Group encompasses Sykes Holiday Cottages, Forest Holidays, UKcaravans4hire and Bachcare in New Zealand. We unite under four core company values that serve as the foundation of everything we do: Being One Team, Owning It, Communicating Honestly. Learning, Growing, and Innovating. These values ensure we remain true to our original ethos and ensure we stay true to our Customers, Owners and Guests.

ABOUT THE DPO ROLE

The Data Protection Officer (DPO) will be responsible for leading the implementation, monitoring, and management of the organisation’s data protection policies, processes, and training initiatives. As the primary contact for regulatory authorities on data protection matters, the DPO will also provide guidance to teams across the organisation. This role is essential in ensuring Forge Holiday Group complies with all data protection regulations, including GDPR and UK Data Protection Act 2018. The ideal DPO will be strategic, versatile and thrive in a fast-paced environment. The role will require an experienced DPO who is a trusted advisor to the business and requires someone who has a hands on and proactive approach.

YOUR RESPONSIBILITIES

• Discretion and confidentiality regarding sensitive data, ensuring confidential material is secure and not leaked to unauthorised staff, customers, or external parties.
• Support and facilitate cross-departmental collaboration to address data protection queries and ensure all processes are privacy-compliant.
• Lead a monthly compliance review meeting with key stakeholders, discussing findings and assigning corrective actions where necessary.
• Group compliance with data protection and privacy laws
• The Group and each division’s continuously documented data protection and privacy related set up
• Data protection and privacy policies and processes, creation, roll-out, training and monitoring
• Trusted advisor to Group on matters touching personal data, and creation of paperwork connected to this
• Data protection and privacy reporting and advice
• Regular data protection and privacy related auditing
• Data protection and privacy strategy and horizon scanning
• Satisfaction of data subject requests