Data Protection Practitioner
Data Protection Practitioner – HM Revenue & Customs
Join to apply for the Data Protection Practitioner role at HM Revenue & Customs.
The pay range is provided by HM Revenue & Customs. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.
Location: Bristol Regional Centre – 3 Glass Wharf; Liverpool Regional Centre – Water Street; Manchester Regional Centre – Three New Bailey; Telford – Plaza 1 and 2; Croydon – Ruskin Square; Newcastle Upon Tyne – Benton Park View; Nottingham Regional Centre – Unity Square; Stratford Regional Centre – Westfield Avenue.
Job Summary
The HMRC office of the Data Protection Office (oDPO) sits within the Data and Information Governance Team, part of HMRC’s Chief Data Office (CDO). CDO supports key business objectives across one of the largest customer bases and most sophisticated IT estates in the UK, delivering digital services for 45 million individuals and 4.9 million business customers. The role is part of an initiative to ensure comprehensive data holdings are processed in full alignment with data protection laws.
Responsibilities
Inform and advise HMRC and its employees on their obligations under data protection laws.
Monitor compliance with UK GDPR, DPA 2018 and other data protection laws.
Help raise awareness and advise on mitigation actions for data protection risks.
Serve as the first point of contact for supervisory authorities, members of the public and departmental staff.
Review privacy risks related to proposed new IT services and assess how changes in legislation may impact HMRC.
Support policy, advice and international teams in data protection aspects of security incidents, customer complaints, individuals’ rights and IT systems.
Manage the functional mailboxes and HO Data Protection Advisors, acting as escalation point for complex matters.
Monitor emerging trends and produce management information.
Provide independent oDPO responses to complex complaints or enquiries and support appropriate HMRC boards and committees.
Participate in research to analyse complex business scenarios, identify data protection issues and risks, and make recommendations.
Draft and support responses to senior leader briefings on individuals’ rights and data breaches.
Advise on Data Protection Impact Assessments (DPIAs) and privacy risks under UK GDPR and DPA 2018.
Respond to security incidents, customer complaints and supplier processing queries.
Contribute to policy development and internal governance boards.
Person Specification
Professional qualification or equivalent experience in data protection.
Proven ability to interpret and apply data protection legislation, including UK GDPR, Data Protection Act 2018, and Data (Use and Access) Act 2025.
Experience reviewing and advising on DPIAs, assessing risks and recommending proportionate mitigations.
Strong stakeholder engagement and influencing skills with confidence to challenge constructively.
Proficiency in Microsoft Office 365 tools.
Ability to communicate complex legal provisions clearly and accessibly.
Experience in risk management and handling complaints.
Experience in international data transfers, risk management and cross‑border compliance.
Transitional Sites
Benton Park View, Newcastle – moving to Pilgrims Quarter, Newcastle.
Telford Plaza, Telford – moving to Parkside Court, Telford.
Behaviours
Managing a Quality Service
Communicating and Influencing
Delivering at Pace
Making Effective Decisions
Benefits
Pension – HMRC contributes at least 28.97 % of salary to the Alpha pension.
Family‑friendly policies.
Personal support.
Coaching and development.
Generous leave allowance – 25 days, increasing by one day per year of service up to 30 days.
Flexible and hybrid working policies.
Additional Information
Seniority level: Mid‑Senior level – employment type: Full‑time – job function: Information Technology.
Leave application: Get notified about new Data Protection Manager jobs across England, United Kingdom.
#J-18808-Ljbffr
Salary: GBP 36000 - 60000 per year
Experience: 3 years required