Lanes Group Ltd

Lanes Group Ltd is a leading nationwide utility services provider with c.5000 dedicated employees. Our diverse subsidiaries drive our success across various sectors, contributing to a remarkable turnover of over £650 million. We are committed to excellence and innovation, ensuring we provide industry leading services to our clients and stakeholders. Join us to be part of a dynamic and growing team that values diversity and fosters professional growth.

Department

IT works closely with operational and support teams across the UK, providing the technology, systems, and infrastructure that enable the business to operate efficiently, securely, and effectively.

The team is responsible for maintaining, securing and supporting business-critical applications, networks, devices, and digital services, while driving technology improvements and innovation across the organisation.

Through responsive support, robust security practices, and continuous development of IT solutions, the team helps ensure employees have the tools and technology they need to perform at their best.

Purpose of the role

DSAR Analyst

Location: Leeds/Midlands (remote with ad hoc office visits)
Hours: Full-time, Monday to Friday (37.5 hours per week), with flexible working options.

The DSAR Analyst is responsible for managing and coordinating Data Subject Rights Requests (DSRRs), including Subject Access Requests (SARs), in accordance with UK GDPR and other applicable privacy regulations. The role ensures that individual rights requests are processed accurately, within statutory timescales, and in compliance with organisational policies.

In addition to DSAR management, the role supports the wider data protection and privacy programme, including Data Protection Impact Assessments (DPIAs), privacy risk assessments, records of processing activities, incident investigations, compliance monitoring, and privacy awareness initiatives.

Key Responsibilities

• Manage and support a wide range of data protection activities, including Data Subject Rights Requests (DSRs), Data Protection Impact Assessments (DPIAs), privacy risk management, personal data breach investigations, and ongoing compliance monitoring
• Coordinate the end-to-end handling of Data Subject Rights Requests, ensuring requests are validated, processed, and responded to within statutory timeframes, while maintaining accurate records, evidence trails, and management reporting
• Support the assessment and mitigation of privacy risks by conducting DPIAs, maintaining Records of Processing Activities (RoPA), contributing to audits and compliance reviews, and assisting with third-party and supplier privacy assessments
• Assist in the investigation and management of personal data incidents and breaches, including risk assessments, root cause analysis, remediation activities, record keeping, and regulatory notification requirements where applicable
• Provide practical data protection advice and guidance to stakeholders across the business, supporting projects involving new technologies, data sharing arrangements, international transfers, and privacy-by-design principles
• Develop and maintain data protection policies, procedures, guidance materials, and governance documentation to support compliance with data protection legislation and organisational standards
• Promote a culture of privacy awareness through training, communications, awareness campaigns, and the development of educational resources to improve understanding of data protection obligations and individual rights
• Build effective relationships with internal and external stakeholders, including Legal, IT, HR, Procurement, operational teams, and third-party partners, to embed data protection best practice across the organisation