Temporary Data Protection Practitioner

Are you an experienced data protection practitioner well versed in GDPR and how to deliver pragmatic compliance in a medium -large sized organisation?

Are you available to take on a short-term assignment located just outside of High Wycombe?

The company takes its responsibilities under data protection seriously and is keen to ensure that it has taken all reasonable steps to provide adequate security and protection for its data. There are data protection and IT security polices in place and individuals with responsibility for both. However, as the company has grown it is conscious it needs to ensure that a suitable level of proactive checks and processes are in place and a sufficient ongoing resource to mitigate risks. At this stage they are seeking assistance to:

– Create and update base information on data flows, processes and data asset owners

– Provide a ‘stock take of current processes and risks

– Identify any high priority recommendations and areas for improvement

– Assess options for an ongoing ‘DPO’ resource needed

The Role

This is an initial assignment of two-three weeks but an extension is possible. At this stage, the following tasks are planned:

– Produce high level mapping of all key data flows. This to provide a ‘data environment’ and the backdrop for future work and priorities.

– Linked to the above, produce a list of data assets.

– Identify potential owners for each key data asset. Provide a template for ongoing data asset owner responsibilities.

– Catalogue key third party data processors. Advise if any key flows need to be reviewed for new contract wordings or data sharing agreements.

– On a risk-based approach, identify key data flows and processes for further review. Set out any initial key issues or weaknesses to review and mitigate.

– Advise on headline process actions required to manage subject access requests and removal of data requests

– Advise on options for long term support and the scale of any DPO role.

A sound background knowledge of IT security is desirable.