Data Protection Analyst

Experteer Overview As a Data Protection Analyst, you will support and evolve Nuffield Health’s data protection framework to ensure UK GDPR compliance and promote privacy by design. You will collaborate with the Data Protection Lead, Information Security and business stakeholders to embed privacy practices across the organisation. You’ll handle DSARs, DPIAs, and privacy risk management, while driving improvements and reporting on data protection performance. This role offers impact on governance, risk mitigation and a culture of accountability. Pay / Benefits * Maintain and improve the Data Protection Framework, records, documentation and accountability evidence * Coordinate Data Subject Rights Requests (DSARs) and other subject rights compliance with deadlines * Provide practical data protection guidance to colleagues on projects and changes * Support DPIAs, PIAs, LIAs and high-risk processing reviews * Assist in personal data breach management, audits, and assurance activities * Support third-party privacy due diligence, DPAs, data sharing and international transfers * Produce reports, dashboards and management information to drive compliance and efficiency * Develop training materials and self-serve tools to promote privacy culture * Perform other duties as required and build relationships across the organisation Tasks * Experience in Data Protection, Privacy, Compliance, Information Governance or Risk roles * Strong knowledge of UK GDPR and Data Protection Act 2018 * Experience supporting DSARs and other data subject rights requests * Experience supporting DPIAs, PIAs or LIAs * Experience with supplier/third-party/privacy reviews beneficial * Knowledge of data breach management and incident response processes * Experience maintaining records, registers and compliance documentation * Strong organisational skills and ability to manage multiple priorities * Excellent written and verbal communication to explain data protection requirements * Confident IT user with Microsoft Office (Outlook, Word, Excel) Key requirements * free gym membership * health assessments * retail discounts * pension options

aaau_ third-party privacy due diligence, DPAs, data sharing and international transfers * Produce reports, dashboards and management information to drive compliance and efficiency * Develop training materials and self-serve tools to promote privacy culture * Perform other duties as required and build relationships across the organisation Tasks * Experience in Data Protection, Privacy, Compliance, Information Governance or Risk roles * Strong knowledge of UK GDPR and Data Protection Act 2018 * Experience supporting DSARs and other data subject rights requests * Experience supporting DPIAs, PIAs or LIAs * Experience with supplier/third-party/privacy reviews beneficial * Knowledge of data breach management and incident response processes * Experience maintaining records, registers and compliance documentation * Strong organisational skills and ability to manage multiple priorities * Excellent written and verbal communication to explain data protection requirements * Confident IT user with Microsoft Office (Outlook, Word, Excel) Key requirements * free gym membership * health assessments * retail discounts * pension options