Job title: Data Privacy Manager

Department: Governance

LOCATION: Central London (Regent's Place, NW1) Hybrid – 4 days in office

REPORTING TO: Gavin Bergin – Director of Governance (and DPO)

TYPE OF CONTRACT: PERMANENT

PLACES PEOPLE PREFER

Our purpose is to create and manage outstanding places which deliver positive outcomes for all our stakeholders on a long term, sustainable basis.

We are a FTSE listed business with a strong balance sheet and £15.2bn of assets under management. But with just 600 employees you’re given the ability to make a big impact and elevate your career quickly.

Our diverse, passionate team of experts works on some of the most ambitious, innovative and sustainable projects in the country – from our high-quality campuses across central London, to some of the top retail schemes in the UK – providing a rewarding career journey where you can shape how you grow.

We believe in shared success and enabling people to be themselves. If you want to feel listened to and understood in an environment where your opinions count and bright ideas are encouraged, you’ve come to the right place!

In our latest engagement survey, 81% of colleagues said they are proud to work at British Land!

THE ROLE

The Data Privacy Manager is responsible for the delivery of the Privacy programme at British Land. Reporting into the Director of Governance (also the DPO), they will co-ordinate business wide-activities and disseminate SME knowledge as needed to ensure compliance with British Land’s legal and regulatory data protection obligations.

This role works with a wide range of internal and external stakeholders to oversee the Privacy programme. It supported by the DPO as a point of escalation and the Records Officer, a member of the wider Governance function, also provides administrative support.

What You’ll Do

Key responsibilities include:

• running the Data Privacy programme at British Land;
• providing privacy subject matter expertise, to ensure the organisation is compliant with data privacy legislation;
• monitoring compliance with the GDPR, the Data Protection Act 2018 and other relevant data protection regulations across the business;
• managing the budget for Data Privacy and spend with external legal advisers as required;
• providing advice regarding the implications of new privacy and data protection laws that impact the business;
• creating and maintaining data protection notices, policies, standards and guidance to ensure the continued reflection and support of British Land’s changing services, business models, evolving use of data, expanding markets, and changes in applicable laws and regulations;
• promoting a culture of privacy by design by advocating for the development, review and/or revision of policies, guidelines, projects, processes and/or programs relating to privacy and data protection;
• completing and maintaining Privacy Impact Assessments and, where triggered, Data Protection Impact Assessments;
• working with Information Security in completing Supplier Risk Assurance reviews;
• Managing relationships with suppliers who provide tools and services used for the operation of the British Land Data Privacy function.
• providing assistance to the Procurement team in relation to Data Sharing Agreements and contracts;
• Create and maintain the organisation’s ICO registrations and fee payments
• supporting and monitoring the maintenance of Records of Processing;
• maintaining the process, tool and providing advice and training to staff across the business who handle Data Subject Rights Requests, while also managing larger employment related Data Subject Access Requests with HR;
• providing advice and guidance on data protection requests from third parties;
• liaising with customers and employees who have raised concerns about how their individual rights request has been managed;
• investigating data breaches along with Information Security and collaborating with the business units to identify remedial actions and monitor successful implementation;
• developing and delivering ongoing training and awareness activities to maintain a strong data protection awareness within British Land;
• defining, planning and executing privacy audits in relation to processing activities, including supporting and monitoring the successful implementation of any remedial actions identified; and
• preparing reports on the state of data privacy compliance for senior management.