Data Protection Officer Uk

**Description**:
**POSITION DETAILS**

**Position Title: Data Protection Officer AXA Partners UK**

Department: General Secretary Reporting line: Country Manager UK & Ireland AXA and dotted line to AXA Partners Head of Data Privacy and Data Governance for NAUKI Location: Redhill
**Role**:Permanent

***

DPO for AXA Partners activities in UK (including ATI activities). Reporting to the Country Manager UK & Ireland with a dotted line of report to the Head of Data Privacy and Data Governance for NAUKI role will support Management in ensuring compliance with the Group Data Privacy Guidance and GSH. Role works closely with the AXA Partners Global DPO, the Head of Data Privacy and Data Governance of NAUKI and will act as a primary contact person for any Data Privacy matters or issues and the AXA Group Date Privacy Guidance.

**KEY RESPONSIBILITIES**
- DPO act as DP Expert and single point of contact for all DP related matters and necessary approvals;
- Developing and updating a local Data Privacy Policy and, where applicable, ensuring that any approved exemptions from this Policy are incorporated into the local policy;
- Monitoring both local and other relevant Data Privacy related regulations impacting activities of AXA Partners in UK and adapting the local Data Privacy policy to ensure compliance with regulatory requirements;
- Training and providing consultative advice to all the areas and departments of AXA Partners UK in question with regard to Data Privacy matters;
- Coordination with the local Risk, Information Security, Compliance, Legal, HR, Physical Security, Operations, Finance and Internal Audit function on Data Privacy matters;
- Communication and reporting to the local data protection authority and other relevant regulators, attendance at data protection authority inspections, handling audit submissions and other information submission requirements;
- Collaboration with the unit(s) responsible to manage requests of Data Subjects to ensure compliance with DP requirements;
- Support on drafting internal or external confidentiality agreement;
- Support in business activities and vendor contracting to ensure compliance with local Data Privacy legislation and AXA Group policy requirements;
- Attendance at Data Privacy, Security, Risk, Compliance or similar Committees;
- Coordination and management of responses to incidents involving Personal Data;
- Act as initial point of contact for all data privacy related matters;
- Providing expert advice in project and process sign-off procedures and providing Data Privacy sign-off when satisfied that each project or process or transfer has necessary requirements to comply with the Policy and BCR;
- Keeping Senior and Business Management informed about their responsibilities of putting necessary DP controls with regard to Data Privacy and being the first line of defense of implementing DP Policy, controls and projects recommendations from DP function;
- Challenging, verifying 1st line activities and controls related to Data Privacy matters and giving necessary recommendation through conducting Internal assurance program;
- Be an active member of the DPO Community.

**Senior Managers & Certification Regime**

The aim of the Senior Managers and Certification Regime (SM&CR) is to reduce harm to consumers and strengthen market integrity by making individuals more accountable for their conduct and competence.

The SM&CR is a catalyst for change, an opportunity to establish healthy cultures and effective governance in firms by encouraging greater individual accountability and setting a new standard of personal conduct.

As part of this, the SM&CR aims to encourage a culture of staff at all levels taking personal responsibility for their actions and make sure firms and staff clearly understand and can demonstrate where responsibility lies:
1. You must act with integrity

2. You must act with due care, skill and diligence

3. You must be open and cooperative with the FCA, the PRA and other regulators

4. You must pay due regard to the interests of customers and treat them fairly

Reporting/ Working Relationships:
Solid reporting line into Country Manager and dotted line to Global Data Protection Officer

Working relationships with:
- All Business Units and Business Lines - transversal role,
- Chief IT Officer team,
- Chief Information Security Officer team,
- Chief Data Officer team,
- DPO community,
- AXA Partners central Legal and Compliance teams.

**Qualifications**:
**SKILLS AND EXPERIENCE**

You are a qualified lawyer with several years of experience in data privacy. You have strong knowledge of data protection law and practices, legal and technical skills, with proven drafting and negotiation skills. You have hands on experience and a proven track record of dealing with complex data protection and privacy issues. You have an understanding and experience of insurance and IT industry. You communicate effectively, with all levels of the organization, both written and v