Amy Gleeson

Data Protection Advisor

Talent

Kempston, BedfordMember since 22 May 2024

Hire this person

Send a job offer directly to this candidate

About

Can pull loose ends together quickly to organise them self and others in a structured approach due to strong planning and time management skills. Thorough and reliable with expert listening skills. Painstaking, conscientious, industrious, and dependablewith a genuine desire to help others.

Flexible and adaptable with a natural ability to share ideas and knowledge. Well-developed people skills. Persuasive with a quick mind to produce creative solutions to problems by analysing data. Curious and keen observer.

Experience

Assisting the CPO in the production of the quarterly data protection report. Focussing on status of compliance and risks to senior management, Boards and Committees.
Maintain and implement all data protection policies, procedures, and privacy notices across the Whitbread Group.
Supporting European data protection assessment, compliance, and awareness activities.
Prepare and deliver Group-wide training on data protection compliance. Where required provide tailored training on specific topics to relevant business divisions (adopting a risk-based approach and react to incidents including drawing lessons learnt and follow up actions).
Provide advice and guidance on the statutory requirements of relevant data protection legislation to be included in contracts and data sharing agreements.
Chair quarterly meetings with the network of Data Protection Champions across the Group.
Consult on / review Data Protection Impact Assessments (DPIA) and Legitimate Interest Assessments (LIA).
Log and guide the business on all Data Protection incidents/breaches. Undertaking investigations of each case reported. Supporting CPO on material breaches and reporting to the ICO, if deemed necessary and to propose preventive actions to reduce the risk of recurrence.
Facilitate the processing of and response to GDPR rights requests made by Data Subjects via direct system access and coordinating and managing the efforts of the owners of other data systems across the business, including third party providers, to ensure a response within the legislative timeframes.