About this job
As a membership organisation, protecting personal data is a core principle, and we are committed to maintaining high standards of practice.
Working with the Head of Data Protection & Information Compliance, the post holders will:
- Process subject access requests (SARs) in line with the UK GDPR. This will include corresponding with UNISON staff and lay members to collate data, using specialist software to prepare documentation for disclosure, applying exemptions to the data in line with Schedule 2 of the DPA 2018 and working to statutory deadlines.
- Investigate personal data breaches in line with the UK GDPR. This will include assessing the severity and level of risk to people’s rights and freedoms, corresponding with UNISON staff and lay members to determine how the breach occurred, identify mitigation measures to prevent reoccurrences, and working to statutory deadlines.
- Maintain the internal breach register as required by data protection legislation of personal data breaches, including remedial recommendations and actions.
- Process erasure requests in line with the UK GDPR. This will include corresponding with UNISON staff and lay members to determine what personal data is being processed and for what purpose, referring to UNISON’s retention policy and working to statutory deadlines.
- Provide general admin support for the data protection team.
- Help maintain a record of departmental statistics, including the number of data protection requests made to the team including SARs, erasure requests, data breaches and complaints.
- Establish and maintain data flow maps for data processes across the union to help ensure that UNISON fulfils the accountability principle in the UK GDPR.
- Assist with the investigation of complaints about data protection breaches. Maintaining a log of any incidents and remedial recommendations and actions.
- Help monitor completion of UNISON’s mandatory data protection training.
You will need excellent communication skills and be a confident user of Microsoft Office with first-rate IT skills. Knowledge and understanding of the UK GDPR and Data Protection Act 2018 is highly desirable, as well as experience of the challenges faced when implementing robust privacy arrangements in a membership organisation.
How to apply
To apply for this opportunity please download and complete the General application form (under “Documents”). See job description and person specification (under “Documents”)
Please note that only the General application form will be accepted.
Please send a copy of the completed application form along with Recruitment and Disability monitoring form to Shauna McDonald, S.McDonald@unison.co.uk quoting ref: ORD/AR40.
Completed application forms must be received by no later than 5pm on Monday 11 March 2024.
Interviews to be held on Monday 25 March 2024.
About UNISON
UNISON is the UK’s leading public services trade union, with over 1.3 million members working in the public sector, private, voluntary and community sectors and in the energy services. We employ approximately 1,200 staff, with around 370 at our national centre in Euston in central London and the remainder in our 12 regions across the UK, including Northern Ireland.
UNISON is a dynamic, progressive union, committed to equality. We encourage men and women of all ages, Black and minority ethnic groups, disabled people, lesbian, gay, bisexual and transgender people to work with us.
