Subject Access Requests (DSARs) Analyst contract
- Fully remote working
- Day rate contract role
We’re looking for experienced Subject Access Request Analysts to support UK-based Data Privacy & Protection teams on a contract basis.
We are particularly interested in individuals who have solid, hands-on experience managing DSARs end-to-end and can confidently manage requests through to completion in a busy operational environment.
The role
You will be responsible for the end-to-end coordination and processing of Subject Access Requests, working closely with Data Privacy & Protection colleagues and other teams and individuals across the organisation to identify, retrieve, review and securely disclose personal information within the required timescales.
Typical responsibilities will include:
• Managing DSARs from receipt through to final response
• Validating and logging requests, including identity/authority checks where required
• Assessing the scope of requests and liaising with requesters where clarification is genuinely required
• Coordinating searches across relevant systems, teams, records and information sources
• Working with business areas and information owners to obtain responsive information
• Reviewing information for relevance and personal data
• Identifying third-party information and considering appropriate exemptions/restrictions
• Applying appropriate redactions and documenting decisions and rationale
• Ensuring information is disclosed securely and in an appropriate format
• Monitoring deadlines, maintaining accurate case records and escalating risks or complex issues where appropriate
• Supporting the wider Data Privacy team with DSAR queries, reporting and process improvement
What we’re looking for
Essential:
• Proven experience of processing DSARs end-to-end
• Strong practical understanding of UK data protection legislation, particularly the UK GDPR, Data Protection Act 2018 and right of access
• Experience conducting/coordinating information searches and reviewing potentially large volumes of data
• Experience identifying third-party personal data and applying redactions/exemptions appropriately
• Excellent attention to detail and a methodical approach to case management
• Strong written and verbal communication skills
• Ability to manage competing priorities and statutory deadlines
• Comfortable working independently while collaborating with the privacy/data protection team, legal, HR and other operational teams
- Experience within either the public or private sector is welcome.
Desirable:
• Experience handling patient health and/or medical information
• Experience using OneTrust
• Experience within private healthcare, NHS, insurance or other data-sensitive environments
• Experience using eDiscovery, DSAR management, case management or redaction tools
• Experience dealing with complex or high-volume SAR/DSAR caseloads
• Relevant privacy, information governance or data protection qualifications
Contractors / interim professionals
We are interested in speaking with experienced contractors/candidate who are happy to work on 3-12 month contract basis who can quickly become effective within an established privacy/data protection function and take ownership of their caseload.
If you have strong hands-on DSAR experience and are available for contract opportunities immediately or with 1-2 months we look forward to hearing from you.
…