Data Protection Officer

Blue Ventures is a marine conservation organization that puts people first. We support coastal fishers in remote and rural communities to rebuild fisheries, restore ocean life, and build lasting pathways to prosperity. Our work began two decades ago in Madagascar’s remote coastal communities and is growing globally. Across a dozen countries, we’re partnering with traditional fishers and community organizations to design, scale, strengthen and sustain fisheries management and conservation at the community level. We bring partners together in networks to advocate for reform, and share tools and best practices to support fishing communities across the globe.

Role Overview

This role is for a statutory Data Protection Officer (DPO) to ensure Blue Ventures meets its obligations under the UK General Data Protection Regulation (UK GDPR) and the UK Data Protection Act 2018. The DPO reports directly to the Chief Executive Officer/Chair of the Board of Trustees.

Key Responsibilities and Duties

The statutory DPO will monitor compliance and data practices internally to ensure the organisation and its functions comply with the applicable requirements under the GDPR/DPA 2018. Specific duties include:

1. Compliance Monitoring: Monitoring compliance and data practices internally to ensure adherence to GDPR/DPA 2018 requirements.
2. Staff Training: Developing and delivering staff training on data protection matters.
3. Risk Management: Conducting Data Protection Impact Assessments (DPIAs) and performing regular internal audits.
4. Stakeholder Liaison: Serving as the primary contact point for supervisory authorities and individuals whose data is processed by the organisation.
5. Policy Development: Collaborating closely with the Legal, Compliance, Public Policy, and Information Security functions to develop and monitor policies and standards applicable to the business in compliance with GDPR/DPA 2018 and other relevant regional legislation in countries where Blue Ventures operates.

Candidate Profile

The successful candidate is expected to thrive in environments that are collegiate and ambitious. They must be able to demonstrate experience of working independently and solving complex problems in challenging situations.

Qualifications and Experience

• Qualification: BA/BSc/HND degree.
• Demonstrated experience in ensuring compliance with the UK General Data Protection Regulation (UK GDPR) and the UK Data Protection Act 2018.
• Proven experience in staff training, conducting Data Protection Impact Assessments (DPIAs), and internal auditing.
• Experience collaborating with Legal, Compliance, Public Policy, and Information Security functions to develop and monitor policies and standards.
• Ability to work independently and solve complex problems in challenging situations.