Data Protection Analyst - Volunteer

The Data Protection Analyst will support the charity to handle personal data lawfully, fairly, and securely in line with UK data protection law (UK GDPR and Data Protection Act 2018) and good practice.

• A meaningful leadership role shaping how the charity stays safe and sustainable.
• Experience working with a growing community organisation.

• Experience working with personal data in a professional context
• Good understanding of core data-protection principles
• Strong attention to detail and ability to follow through on actions.
• Ability to explain data-protection concepts in clear, practical terms to non-specialists.
• Comfortable working with registers/logs (e.g. Excel/Google Sheets) and shared-drive tools (e.g. SharePoint/Teams)
• Familiarity with UK GDPR and the Data Protection Act 2018 (e.g. from work, study, or prior volunteering).
• Experience with any of the following data protection policies, privacy notices, data-mapping, data-sharing agreements, or data protection impact assessments (DPIAs).
• Experience working in a charity, mental health, health, social care or community-based setting.
• Data protection or privacy training/certification

• Support the maintenance of the charity’s Data Protection Policy, Privacy Notices, and related guidance (e.g. retention schedule, subject access guidance).
• Help maintain a Record of Processing Activities (ROPA) or data-mapping sheet that captures what personal data is collected, why it is collected, where it is stored, who it is shared with, and how long it is kept.
• Assist departments in identifying and documenting any higher-risk processing (e.g. health information, vulnerable persons, children/young people).

• Provide practical advice to volunteers and department leads on day-to-day data protection questions (e.g. what can be stored, shared, or emailed, collecting consent, anonymising information).
• Ensure data protection is integrated into the planning of projects and new initiatives.
• Work alongside the Cyber Security Specialists to ensure technical and organisational measures support good data protection practice (e.g. access control, secure sharing).
• Support with data subject right and respond within statutory timeframe.

• Help maintain logs such as data subject requests and data protection incidents/near-misses and breaches.
• Support the Governance Lead to triage any potential data breaches, gather basic details, and track actions through to closure.
• Assist in drafting short internal summaries of incidents and lessons learned, and help update policies or training where needed.

• Create or update short data-protection guidance and training materials for volunteers.
• Help deliver brief awareness sessions or onboarding modules to new volunteers and department leads.
• Prepare data protection management information for Trustees (e.g. key risks, incidents, log summaries, upcoming priorities).