Apprentice Information Governance Assistant

Purpose of Position

This apprenticeship role is focused on gaining professional experience, on-the-job training, and development in information governance. You will support the DPO and Data Protection Team in ensuring that DPD is compliant with data protection regulations, primarily the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Data (Use & Access) Act 2025 and other related laws.

Key Tasks/Areas of Responsibility

• Develop professional communication skills by acting as a first point of contact for internal and external stakeholders at all levels, including the CEO, Directors, data subjects, and third-party partners, regarding data protection inquiries.
• Learn to provide administrative support to the DPO and the Data Protection Team in the delivery of the Information Security & Privacy Framework work programme.
• Develop the ability to influence and engage with business stakeholders at all levels, helping to embed a culture of data protection awareness and accountability throughout the organisation.
• Develop an awareness of emerging technologies and digital initiatives within DPD UK, supporting the DPO in assessing potential privacy impacts and ensuring innovation aligns with our data protection commitments.
• Learn and understand what a Record of Processing Activities (ROPA) is, while assisting with the maintenance and progression of ROPAs by liaising with various functions within DPD UK.
• Provide administrative support in ensuring that all Records of Processing Activities (ROPAs) are up to date and have accurate retention periods.
• Develop an understanding of and assist with the coordination of DPD UK’s information security and data protection training programmes.
• Provide administrative support and assist with coordinating and monitoring information security and data protection training programmes for the organisation and specialised roles or functions with key data protection responsibilities.
• Learn to support the creation and publication of regular data protection communications for internal stakeholders.
• Learn about Privacy Notices and support publishing them to satisfy data processing requirements for all data subjects.
• Develop knowledge of privacy by design activities, supporting and assisting with the progression of DPIAs and due diligence checks under supervision.
• Provide administrative support and assist with creating reports for any associated data protection topics and risks, learning how to utilise Google applications for reporting, and working with applicable stakeholders internally and externally to ensure that actions are in place to mitigate them.
• Develop knowledge through learning about data protection and information security, while providing support, advice, and assistance to all key internal and external stakeholders in relation to these matters via the DPO inbox.
• Gain a comprehensive understanding of DPD UK’s obligations regarding data breach incidents. Support the monitoring and progression of any identified incidents, including drafting reports, assisting with notifications to the DPO, Senior Management, the ICO, and affected data subjects, and contributing to the tracking of remedial actions through to formal review and closure.
• Develop an understanding of and provide support with the collation of evidence for regular reviews of DPD’s Information Security & Privacy policies, procedures, and other formal documents that contain requirements for compliance with data protection legislation, ISO27001, and ISO27701.
• Develop an understanding of and provide support to the DPO and Data Protection Team in contributing to the continuous improvement of DPD’s Information Security & Privacy Strategy across the organisation.
• Develop an understanding of internal and external data protection audits by assisting the DPO and Data Protection Team with these processes, including contributing to the ongoing maintenance of our ISO27001 and ISO27701 accreditations.
• Develop a comprehensive understanding of data subject rights requests, assisting with the process by learning to manage communication with data subjects directly while ensuring that all requests are accurately logged, monitored, and completed within the required legal timeframes.
• Provide support to the DPO and Data Protection Team in relation to any other projects as required.  
• Commit to continuous learning and professional development regarding data protection legislation, DPD UK’s specific data protection obligations, and the wider responsibilities of all staff in maintaining compliance.
• Any other duties as requested