Data Privacy Advisor
Location: Mornington Crescent, Greater London House, NW1
Department: Legal
Level: Implement
Reports to: Data Protection Officer
THE ROLE
As a Data Privacy Advisor, youll be a subject matter expert with responsibility for providing advice on Data Protection, privacy and on associated legislation and how to apply this practically to ASOS. Topics you will be dealing with include electronic marketing, cookies and advertising, compliance with data sharing best practice, de-identification, data minimisation, data protection contract clauses and data transfer mechanisms (including Model clauses/SCCs) and everything in between.
As well as being an expert in this field you will need to be versatile, capable of guiding and advising a wide variety of stakeholders from across ASOS business and at various levels of seniority.
This role is critical in helping ASOS meet the data protection requirements of our customers, employees and suppliers, across the globe, and requires the ability to give commercial justification as well as advice on a range of subject matters. You will need to be able operate comfortably and effectively across different jurisdictions, with support and guidance, and to promptly identify risks and issues that need to be escalated within the wider team and the company.
The role requires someone who is hands-on with a strong professional ethic and the energy, interest, and capability to switch between the broad range of subjects the Data Protection and Privacy team deal with. ASOS is fast paced, so all employees also need to be adaptable, and be enthused and excited about whats around the corner for us.
Communication is key, as our team members continually build relationships at all levels across the business. To win your stakeholders over, youll need to speak their language and move as quickly as them. You will need the ability to make quick, confident decisions, always in the ASOS tone of voice and youll be given the tools, guidance and support to help with those decisions when you need it.
THE TEAM
This Data Privacy Advisor role sits within the Data Protection and Privacy team, reporting into the Data Protection Officer and working closely alongside a Senior Data Privacy Advisor and a Data Privacy Assistant. The team is accountable for providing advice and risk management expertise across a wide spectrum of data protection and privacy matters including our Privacy Notice, data collection processes, consent management, cookie compliance and the business supplier and third-party agreements (including Model Clauses for data transfers where required). The Data Protection and Privacy team also have input on ASOS marketing and promotional activities and a variety of customer-facing projects and ASOS employee-facing projects, as well as responding to customer queries and managing data subject rights requests.
The role requires someone who is confident and capable of interacting with a variety of stakeholders from the marketing, HR, operations, Customer Care and technology areas of ASOS, including our Cyber Security Team. The Data Protection and Privacy team is a small team, that covers a lot of ground, and it can only do that by being flexible, adaptable and agile both within the business and between themselves. You will also be part of the wider ASOS legal team, made up of c.30 lawyers and our in-house IP and IT experts.
What youll be doing
- Provide subject matter expert advice on Data Protection and associated legislation and the application to ASOS.
- Assist with embedding policy and training in relation to Personal Data (PD) areas, including privacy rights, data retention and data sharing.
- Provide input to contract negotiations with key customers and suppliers; including the ability to draft contract clauses on DPA matters.
- Assist with identification and remediation of data incidents involving personal data.
- Advise the business in relation to PD handling, including data subject access requests and other requests for information or complaints involving personal data.
- Input to new projects by conducting privacy impact assessments, assisting on Data Protection Impact Assessments and providing initial advice with input from relevant project team members and the Data Protection and Privacy team.
- Advise on ASOS marketing and third-party marketing initiatives involving PECR and e-privacy compliance and data sharing.
- Review and update fair processing information and privacy notices.
- Provide advice around data minimisation techniques and de-identification of personal data in large data sets.
- Advising ASOS in relation to its broader data strategy.
Key Relationships
- Internal: Legal and Governance team, plus a range of stakeholders (from a junior level to Directors) across our Procurement team, Cyber Security team, Marketing, Technology teams, Customer Care and HR
- External: external counsel and other advisers, marketing partners, suppliers, and affiliates.