Data Protection Lead

Salary: £40,000 - 40,000 per year

Requirements

• Practical experience supporting data protection or compliance activities within a UK GDPR environment.
• Experience managing and responding to data subject rights requests, including reviewing and redacting documentation.
• Experience maintaining governance documentation such as Records of Processing Activities (ROPA), DPIA logs, or incident registers.
• Experience coordinating across multiple business stakeholders to gather information and track actions.
• Working knowledge of UK GDPR and the Data Protection Act 2018.
• Experience supporting Data Protection Impact Assessments (DPIAs).
• Exposure to incident management or personal data breach processes.
• Experience delivering or coordinating compliance training.
• Experience within a regulated or customer-data-driven environment.
• Strong organisational and documentation skills.
• Attention to detail, particularly in reviewing and redacting personal data.
• Ability to communicate clearly with non-legal stakeholders.
• Confidence escalating issues appropriately.
• Practical, solution-focused mindset.

Responsibilities

• Maintain and update Records of Processing Activities (ROPA), data retention schedules, policies, procedures and related governance documentation.
• Support business teams in documenting new or amended processing activities and ensuring required governance artefacts are completed.
• Maintain accurate compliance records to support accountability obligations.
• Manage and respond to data subject rights requests, including rights of access, rectification, erasure, restriction, objection, and data portability.
• Coordinate information gathering across relevant teams and ensure responses are issued within statutory timeframes.
• Review material and apply appropriate redactions to protect third-party personal data and confidential information in line with established procedures.
• Escalate complex legal considerations, exemption assessments, or high-risk matters to the Data Protection Officer (DPO) where required.
• Support business stakeholders in embedding privacy-by-design principles into new projects, systems, and operational changes.
• Coordinate and facilitate Data Protection Impact Assessments (DPIAs), including gathering relevant information, documenting risks, and tracking mitigation actions.
• Ensure DPIAs are completed where required and submitted to the DPO for review and advice.
• Escalate high-risk or residual risk processing activities to the DPO and relevant governance forums.
• Support the coordination and documentation of personal data breach investigations.
• Maintain incident records and ensure prompt internal reporting of suspected breaches.
• Escalate potential notifiable breaches to the DPO for assessment under UK GDPR reporting requirements.
• Support preparation of information required for regulatory notification where directed by the DPO.
• Support the coordination and delivery of data protection training and awareness initiatives across the organisation.
• Promote understanding of data protection responsibilities and good practice within business teams.
• Identify recurring compliance themes or training gaps and escalate to the DPO where further guidance or intervention may be required.
• Act as a point of contact for routine data protection queries and provide guidance in line with established policies and DPO advice.
• Promote consistent data protection practices across business operations.

Technologies

• Support
• Network

More

We are Greenhous, one of the largest dealer groups in the UK with over 100 years of experience in the franchised dealer world. We lead in providing dealer services for some of the worlds leading manufacturers. Our extensive network includes Car and Commercial dealerships across Shropshire, Staffordshire, and the West Midlands, featuring various franchises such as Vauxhall, Nissan, and DAF. In return for your commitment as a permanent employee, youll enjoy numerous benefits including 30 days of holiday (including 8 bank holidays), increasing company sick pay with tenure, pension contributions, career development opportunities, and various employee discounts. Additional perks include qualified mental health first aiders, free will writing services, mortgage advice, eye tests for VDU users, flu jabs, on-site parking, a cycle-to-work scheme, and access to our Employee Assistance Program (EAP).

last updated 15 week of 2026