INTRODUCTION
Founded in 1856, Burberry today remains quintessentially British, with outerwear at its core. Digital luxury positioning and intensive focus on design innovation, quality and heritage icons ensure continued brand purity and relevance globally across genders and generations. Burberry believes that in order to be a great brand it must also be a great company and constantly leverages the energy of its compassionate and creative thinking culture to continually innovate and drive the brand forward. Headquartered in London, Burberry is a design, marketing and retail led business with a global reputation for innovative product design, digital marketing initiatives and dynamic retail strategies.
JOB PURPOSE
As one of two Data Privacy Advisors operating in the team you will be central to responding to a dynamic privacy landscape. The Data Protection Office is responsible for supporting the business in protecting our customer and employee’s personal data through established DPO processes, driving accountability across the business in order to protect Burberry’s brand and reputation, and to maintain customer and employee trust.
RESPONSIBILITIES
As the Data Privacy Advisor, you are responsible for the following activities:
Understanding and documenting how the business handles personal data across all business functions, including HR, IT, Customer Service, Marketing and Digital. Supporting colleagues across the business to ensure that Burberry’s RoPA is maintained and updated. Managing personal data risks appropriately Helping project managers and stakeholders complete Privacy Impact Assessments, and advising on privacy by design requirements. Reviewing and overseeing data privacy compliance with new projects, systems and vendors. Working with Legal, Customer Service and HR to manage and respond to data subject requests across different business areas Proactively handling data privacy issues and ensuring that appropriate actions are taken in a timely manner. Managing data protection queries and complaints from customers, employees and other individuals Developing and delivering privacy-focussed online and face to face training and awareness sessions to employees across all levels of the business. Working with different business areas to understand their training needs. Developing engaging and innovative training and awareness materials Monitoring and reporting on data protection compliance across the organisation Reviewing, triaging and advising on data incidents, working closely with Legal Recording incidents on the breach register and supporting with follow-up actions
QUALIFICATIONS
In-depth knowledge of GDPR and other data protection legislation and a strong practical understanding of data protection law in practice Ability to clearly communicate practical and commercial data protection advice across a variety of business stakeholders Experience of working in data protection in a large organisation in the private sector CIPP/E or equivalent qualification desirable Practical working knowledge of global data protection laws