Data Protection Officer

Join to apply for the Data Protection Officer role at Rightmove.

Our vision is to give everyone the belief they can make their move. We aim to make moving simpler, by giving everyone the best place to turn to and return to for access to the tools, expertise, trust and belief to make it happen. We’re home to the UK’s largest choice of properties and are the go‑to destination for millions of people planning their next move, reading the latest industry news, or just browsing what’s on the market.

We build products powered by large‑scale data insights. As we continue to grow, we are committed to protecting the privacy, security, and ethical use of data across all our platforms.

The DPO will lead and support our Data Privacy teams and oversee our data‑protection compliance programme, ensuring adherence to the UK GDPR, Data Protection Act 2018, DUAA and PECR, while also monitoring the implications of EU GDPR and AI Act for any cross‑border operations. This role will work closely with legal, compliance, internal audit, engineering, product, security, HR, and commercial teams to embed privacy‑by‑design and maintain a strong culture of data stewardship.

• Serve as the primary contact point for the Information Commissioner’s Office (ICO).
• Ensure compliance with UK GDPR, Data Protection Act 2018, DUAA and PECR, and monitor changes in the UK data‑protection landscape.
• Maintain up‑to‑date Records of Processing Activities (RoPA).
• Lead and document Data Protection Impact Assessments (DPIAs), Legitimate Interest Assessments (LIAs) and Transfer Risk Assessments (TRAs).
• Ensure robust processes for handling data subject rights (DSRs), including access, erasure, rectification, and objection.

• Develop, maintain, and implement the organisation’s data‑protection strategy, policies, and internal controls.
• Provide specialist advice on privacy‑by‑design, data minimisation, storage limitation, consent management, tracking technologies, cookie compliance and lawful bases for processing.
• Work with Information Security to support security incident management and lead assessments of personal‑data breaches, including ICO reporting where required.
• Advise on vendor due diligence and data‑processing agreements (DPAs).
• Provide advice and guidance on data sharing agreements (DSAs) with partners and third parties.

• Design and deliver training, awareness campaigns, and resources to build privacy literacy across the organisation.
• Champion a “privacy first” mindset throughout the business.
• Review and maintain internal Data Protection policies.

• Conduct regular assessments, audits, and reviews of compliance and operational practices.
• Evaluate and monitor third‑party processors’ compliance with data‑protection obligations.
• Provide regular reporting to senior leadership on privacy risks, incidents, and program maturity.
• Undertake horizon scanning and reporting material changes.

• Proven experience as a DPO, Privacy Manager, or equivalent role within a UK organisation—ideally within a tech‑driven or data‑rich environment.
• Detailed understanding of UK GDPR, DPA 2018, DUAA, PECR, ICO guidance, and associated best practices.
• Strong experience in DPIAs, risk assessments, audits, and implementing compliance frameworks.
• Familiarity with technical and organisational security measures, SSDLC, data architecture, and modern data ecosystems.
• Strong understanding of cookie compliance and tracking technologies.
• Excellent communication skills, with the ability to translate legal requirements into practical business guidance.
• Strong leadership and stakeholder management skills.
• Experience in providing support and advice on AI technologies.

• Professional privacy certifications such as CIPP/E, CIPM, CIPT, BCS DPO, or similar.
• Experience working with cloud platforms (AWS, GCP, Azure) and modern data tooling.
• Experience supporting fast‑growth tech environments or regulated industries.
• Legal, information‑security, or data‑governance background.

Our vision is to give everyone the belief that they can make their move. We aim to make moving simpler, by…