Data Privacy Associate (FTC - 12 Months) New

About Triple Point

Function and role

Key responsibilities

• Support Data Protection Impact Assessments and Transfer Impact Assessments.
• Support system and information data-flow mapping, including the Information Asset Register.
• Help develop and maintain the Record of Processing Activities and Data Retention Schedule, and advise senior personnel.
• Develop the subject access rights process and handle data subject requests and related complaints within statutory timelines.
• Support contract reviews, including in Vertice, for UK GDPR compliance and Record of Processing Activities maintenance.
• Assist with personal data incident investigations, logging and compliance documentation.
• Produce process maps and compliance records, track actions to completion, and maintain audit trails and supporting evidence.
• Prepare GDPR programme updates and management information for the Data Protection Officer and onward reporting.

Essential experience

• Direct experience in a dedicated data privacy, information security compliance or paralegal risk function.
• Proven understanding and experience of UK GDPR, the Data Protection Act 2018 and PECR.
• Familiarity with data governance frameworks, privacy impact assessments and third-party data processor oversight.
• Strong interpersonal, written and verbal communication skills, including explaining regulation to non-legal colleagues.
• High attention to detail and strong documentation and analytical capabilities.

Desirable experience

• Banking, financial services or SaaS experience is advantageous but not essential.
• Awareness of the Data (Use and Access) Act 2025 is desirable.
• The description also mentions familiarity with IT infrastructure, including cloud platforms and networks, but the supplied text cuts off mid-qualification.