Data Privacy Manager

The Economist Group is the leading source of analysis on international business and world affairs. We deliver our information through a range of formats, from newspapers and magazines to conferences and electronic services. What ties us together is the objectivity of our opinion, the originality of our insight and our advocacy of economic and political freedom around the world.

Our Compliance, Business Continuity & Information Security team is seeking a Data Privacy Manager to ensure that The Economist Group, its staff, and representatives comply with data privacy legislation or regulations that may be applicable globally.

How you will contribute:

• Work with the Head of Privacy to provide expert advice and guidance to employees across the business/regions in relation to data protection and privacy
• Develop and maintain comprehensive data privacy policies and procedures including Group wide privacy policies, retention policies, data mapping and privacy impact assessments.
• Develop and maintain a comprehensive knowledge of data protection legislation and regulation, implementing any changes and informing relevant parts of the Group’s operations where they are impacted by privacy
• Engage with product development teams to ensure that the Group’s products and services continue to meet privacy requirements and the development programs include privacy by design principles.
• Advise Group businesses on data protection risks, issues, and how to mitigate or navigate them  
• Manage the Data Processing and Risk Registers, ensuring accurate records of significant data processing across the business and identifying and managing associated risks.
• Undertake regular data handling reviews and supplier audits to:
  • assess compliance with relevant laws and policies
  • identify compliance/reputational risks; and
  • agree action plans to address those risks.
• Produce and develop appropriate metrics and updates for stakeholders to demonstrate effective privacy program operations and governance.
• Ensure staff, customers and clients are aware of data privacy requirements regarding personal data and what they need to do
• Provide specialised guidance to staff who process personal data frequently or handle more sensitive data.
• Work with the Information Security team to investigate potential breaches and participate in incident response processes.
• Provide assurance that processes in place to protect the privacy of our customers are being followed and a high standard of data protection is adhered to globally.
• Work with the Group’s legal team to implement appropriate contractual measures for data protection issues including model clauses where appropriate
• Maintain awareness with evolving regulatory guidance and compliance frameworks that impact the Group’s operations globally, undertake gap analysis o identify changes required and oversee the implementation of applicable requirements across the business.
• Ensure all data subject requests regarding their rights (e.g. access requests, deletion requests) are responded to in a timely manner
• Act as point of contact for data protection audits and regulatory enquiries.

The ideal skills for this role are:

• Strong ability to communicate with internal clients and stakeholders regarding the importance of privacy as a core value
• Thorough knowledge of the UK Data Protection Act and GDPR
• Strong influencing and negotiating skills
• Demonstrated ability to maintain good relationships through effective communication
• Ability to self start and take ownership of all privacy related projects including keeping up to date with changes in law and practice and have the skill to update stakeholders and proactively implement effective change
• Strong project management skills, including; planning, organizing and analysis