Data Protection Officer (DPO)


Location: Dorset (Hybrid)
Rate: £350 (A Day)
Duration: 3 months (initially)
Working Pattern: 3-4 Days


Key Responsibilities
Act as the organisation’s designated Data Protection Officer, maintaining independence and reporting on compliance to senior leadership
Lead and oversee compliance with UK GDPR, Data Protection Act 2018, FOIA, and EIR
Provide expert, pragmatic advice on data protection, privacy, information security, and records management
Manage data protection incidents and personal data breaches, including ICO engagement where required
Oversee subject access requests and complex data protection queries
Lead and advise on Data Protection Impact Assessments (DPIAs)
Embed data protection by design across strategic initiatives, including digital transformation and system change
Contribute to governance forums and support ethical and responsible use of data and emerging technologies (including AI)
Support and oversee freedom of information compliance alongside specialist colleagues
Develop and deliver training and awareness to promote a strong data protection culture


Essential Experience
Significant experience operating as a Data Protection Officer or senior data protection specialist within a large or complex organisation
In-depth, practical knowledge of UK GDPR, data protection legislation, and ICO guidance
Proven experience advising senior leaders and managing regulatory risk
Experience handling data breaches, incident management, and statutory deadlines
Strong stakeholder engagement, communication, and influencing skills
Ability to work independently while collaborating across academic, professional, and technical teams


Desirable
Experience in Higher Education, Further Education, or the public sector
Professional or postgraduate qualification in data protection, information governance, legal, or related discipline
Experience overseeing FOI/EIR compliance
Experience supporting transformation, digital change, or complex system environments