Data Protection Advisor
1 day ago
Leeds
INTRODUCTION Founded in 1856, Burberry today remains quintessentially British, with outerwear at its core. Digital luxury positioning and an intensive focus on design innovation, quality, and heritage icons ensure continued brand relevance globally across genders and generations. Burberry believes that to be a great brand, it must also be a great company, leveraging the energy of its compassionate and creative culture to innovate and drive the brand forward. Headquartered in London, Burberry is a design, marketing, and retail-led business with a global reputation for innovative product design, digital marketing initiatives, and dynamic retail strategies. JOB PURPOSE As one of two Data Privacy Advisors in the team, you will be central to responding to a dynamic privacy landscape. The Data Protection Office supports the business in protecting customer and employee personal data through established DPO processes, driving accountability to protect Burberry’s brand and reputation, and maintaining customer and employee trust. RESPONSIBILITIES As the Data Privacy Advisor, your responsibilities include: Understanding and documenting how the business handles personal data across all functions, including HR, IT, Customer Service, Marketing, and Digital. Supporting colleagues to ensure Burberry’s Record of Processing Activities (RoPA) is maintained and updated. Managing personal data risks appropriately. Assisting project managers and stakeholders with Privacy Impact Assessments and advising on privacy by design requirements. Reviewing and overseeing data privacy compliance for new projects, systems, and vendors. Collaborating with Legal, Customer Service, and HR to manage data subject requests. Proactively addressing data privacy issues and ensuring timely actions. Handling data protection queries and complaints from customers, employees, and other individuals. Developing and delivering privacy-focused training and awareness sessions for employees at all levels. Understanding training needs across business areas and creating engaging, innovative training materials. Monitoring and reporting on data protection compliance organization-wide. Reviewing, triaging, and advising on data incidents, working closely with Legal. Recording incidents and supporting follow-up actions. QUALIFICATIONS Deep knowledge of GDPR and other data protection laws, with practical understanding of law in practice. Ability to communicate practical and commercial data protection advice effectively to diverse stakeholders. Experience working in data protection within a large private sector organization. CIPP/E or equivalent qualification is desirable. Practical knowledge of global data protection regulations. #J-18808-Ljbffr