Promise Uche

Experienced Data Privacy Analyst with a strong background in UK GDPR, the Data Protection Act 2018, and other privacy regulations. Skilled in conducting DPIAs, managing data subject access requests (SARs) and FOI requests. Comfortable working across teams to provide practical advice on data protection, risk assessment, and policy development.

Experienced in handling data breaches and reviewing vendor contracts and international data transfers. Passionate about embedding privacy best practices, delivering training, and helping organizations strengthen their privacy and security frameworks. Known for a proactive and solution-focused approach to navigating complex data protection challenges.

Data Protection and Information Governance (Contract) - West Beckshire Council

(2025-01)

• Managed the data protection inbox, responding to Subject Access Requests (SARs), Freedom of Information (FOI) requests and other information rights enquiries in line with statutory deadlines
• Applied expert knowledge of data protection legislation to assess complex requests, redact third-party information and apply lawful exemptions appropriately while ensuring compliance with UK GDPR and the Data Protection Act
• Supported the completion of Data Protection Impact Assessments (DPIAs) by providing risk-based advice on new initiatives, projects and data-sharing activities
• Collaborated with project teams and stakeholders to identify privacy risks, recommend mitigating controls and ensure that data processing activities are aligned with legal and organisational requirements
• Contributed to the review and enhancement of organisational policies, procedures and information governance frameworks
• Assisted in embedding effective governance structures by ensuring policies reflect current legislation, regulatory expectations and industry best practices
• Supported continuous improvement initiatives to strengthen compliance across the organisation
• Delivered privacy and information governance training sessions to managers and staff, promoting awareness of data protection responsibilities and embedding a culture of compliance
• Shared legislative updates, best practices and operational guidance through team briefings, workshops and regular knowledge-sharing sessions to improve organisational understanding of information governance obligations
• Investigated and assessed data breaches and information security incidents, advising on remedial and corrective actions to minimise organisational risk
• Determined when escalation to the Information Commissioner's Office (ICO) was required and supported incident response activities to ensure compliance with reporting obligations and internal procedures
• Provided expert guidance and risk-based advice to senior leaders, managers and operational teams on information governance, privacy and data protection regulations
• Worked collaboratively with IT teams, legal departments and wider business stakeholders to strengthen data security controls, support compliance initiatives and ensure adherence to statutory and regulatory requirements
• Managed and maintained organisational records management processes, ensuring information assets, records and documentation were stored, retained and disposed of in accordance with legal, regulatory and organisational requirements
• Supported the maintenance of Records of Processing Activities (ROPA), information asset registers and retention schedules, while working closely with Information Asset Owners to promote accountability, improve record accuracy and strengthen information governance practices across the organisation
• Supported and coordinated internal and external information governance audits to assess compliance with UK GDPR, the Data Protection Act and organisational policies
• Conducted compliance reviews, monitored corrective actions, and identified areas for improvement to strengthen governance controls and reduce organisational risk
• Collaborated with stakeholders to implement audit recommendations, maintain accurate audit documentation and support continuous improvement initiatives across privacy and compliance functions

Information Governance Officer (Contract) - Wolverhampton University

(2023-11 - 2024-12)

• Managed and responded to data breaches and information security incidents, ensuring that reportable breaches were assessed and escalated to the Information Commissioner's Office (ICO) within statutory timeframes
• Conducted investigations into incidents, advised on corrective actions and supported the implementation of preventative measures to reduce future risks and strengthen organisational compliance
• Maintained and updated the organisation's Record of Processing Activities (ROPA) and Information Asset Register, ensuring accurate documentation of processing activities and information assets
• Worked closely with Information Asset Owners to promote accountability and ensure clear understanding of their governance and compliance responsibilities
• Delivered Information Governance and data protection training sessions to staff across the organisation, embedding a strong culture of privacy awareness and compliance
• Provided guidance on UK GDPR, the Data Protection Act and organisational policies through workshops, briefings and ongoing support to improve staff understanding of information governance obligations
• Worked collaboratively with IT teams and wider business functions to strengthen data privacy controls and support effective governance frameworks
• Assisted in implementing best practice solutions to improve compliance, information security and operational efficiency across organisational processes and workflows
• Provided expert guidance on information governance and data protection legislation, ensuring compliance with UK GDPR, the Data Protection Act and associated regulatory requirements
• Acted as a trusted advisor to managers and staff by offering practical, risk-based advice on data handling, information sharing and compliance obligations
• Developed, reviewed and maintained Information Governance policies and procedures, ensuring they remained aligned with evolving legal, regulatory and organisational requirements
• Assessed existing data processes and workflows, identifying opportunities for improvement and implementing best practice governance solutions to enhance compliance and operational effectiveness
• Conducted and reviewed Data Protection Impact Assessments (DPIAs) to identify, assess and mitigate privacy risks associated with projects, systems and new processing activities
• Collaborated with stakeholders to ensure appropriate controls were implemented and that privacy considerations were embedded into business operations and project delivery
• Handled Subject Access Requests (SARs) and other data subject rights requests efficiently and within statutory deadlines
• Ensured that responses complied with legal and organisational obligations while maintaining confidentiality, accuracy and appropriate application of exemptions where required

Information Governance Administrator - FELA

(2022-04 - 2023-05)

• Managed the information governance and data protection inbox, responding to Subject Access Requests (SARs), Freedom of Information (FOI) requests and other information rights enquiries within statutory deadlines
• Applied knowledge of UK GDPR and the Data Protection Act to assess requests, redact third-party information and ensure lawful exemptions are appropriately applied
• Supported the completion and review of Data Protection Impact Assessments (DPIAs) by identifying privacy risks associated with new projects, systems and data-sharing activities
• Worked collaboratively with stakeholders to recommend mitigating controls and ensure compliance with legal and organisational requirements
• Maintained Records of Processing Activities (ROPA), information asset registers and records retention schedules to ensure compliance with data governance requirements
• Supported Information Asset Owners in understanding their responsibilities and promoted best practices in records management and information handling across the organisation
• Assisted in the review and maintenance of information governance policies, procedures and compliance frameworks
• Ensured governance documentation remained aligned with current legislation, regulatory expectations and organisational standards while contributing to continuous improvement initiatives
• Delivered information governance and data protection awareness sessions to staff and managers, promoting a culture of compliance and accountability
• Shared updates on legislation, organisational procedures and best practices through workshops, guidance materials and team briefings
• Supported the investigation and management of data breaches and information security incidents, ensuring appropriate remedial actions were implemented
• Assisted in assessing reportable incidents and escalating breaches to the Information Commissioner's Office (ICO) where necessary in line with statutory requirements
• Supported internal and external audits relating to information governance and data protection compliance
• Conducted compliance checks, monitored corrective actions, and maintained accurate audit records to strengthen governance controls and support continuous improvement activities
• Provided guidance and administrative support to managers, staff and operational teams on information governance and data protection matters
• Worked closely with IT, legal and business departments to strengthen data security controls, improve compliance processes, and ensure adherence to statutory and organisational requirements

MSc - Information Technology Management - University of Wolverhampton

BSc - Electrical and Electronics Engineering