Data & GDPR Officer

The Data & GDPR Officer is responsible for ensuring our donor, beneficiary, and volunteer data is managed efficiently, accurately, and in strict compliance with data protection laws. Reporting to the Head of Salesforce & IT, this role bridges the gap between privacy compliance and practical database stewardship. You will champion data quality, build compliant reporting workflows, ensure regulatory compliance across fundraising activities, and help maximise the impact of our Salesforce CRM while protecting the rights of our supporters, beneficiaries and volunteers.

Main Responsibilities

• GDPR & Privacy Compliance
• Consent Architecture: Audit and maintain robust consent and communication preference structures within Salesforce to ensure absolute compliance with UK GDPR and PECR.
• Fundraising Compliance: Ensure all digital marketing and direct mail comply with the Fundraising Regulator's Code of Fundraising Practice.
• Data Subject Rights: Manage the end-to-end processing of Subject Access Requests (SARs) and Right to be Forgotten requests, coordinating data extraction and erasure directly within Salesforce and connected systems.
• DPIAs & Third-Party Risks: Conduct Data Protection Impact Assessments (DPIAs) for new Salesforce integrations, third-party fundraising apps (e.g., JustGiving), and external vendors.
• Breach & Incident Tracking: Log, investigate, and manage data incidents or potential breaches, escalating critical issues to senior leadership and regulatory bodies if necessary.
• Salesforce Report Creation & Analytics Support
• Compliant Report Building: Design, build, and maintain standard and custom Salesforce reports and dashboards for fundraising, marketing, bereavement services and operational teams.
• Data Selection & Segmentation: Create complex, compliant data selections within Salesforce, verifying that opt-in preferences are accurately filtered out before lists are exported or synced with marketing platforms.
• Data Quality Reporting: Establish regular data-quality monitoring reports and exception dashboards in Salesforce to identify and flag incomplete records, missing consent fields, or formatting errors.
• Trend Analysis: Provide data insights and reporting on donor retention, communication opt-out trends, and Subject Access Request (SAR) metrics to help inform data strategy and compliance health.
• Salesforce Data Stewardship & Governance
• Donor Data Uploads: Manage the scheduled and ad-hoc import of donor donations, and volunteer datasets from multiple external income streams into Salesforce.
• Data Quality & Hygiene: Monitor and improve database health by running regular deduplication, validation, and address-cleaning routines within Salesforce.
• Data Standards & Documentation: Maintain the organisation's data dictionary, fields/objects mapping, and Records of Processing Activities (ROPA).
• Retention & Lifecycle Management: Enforce the charity's data retention policies, overseeing the automation or manual archival and secure deletion of expired legacy, donor, and beneficiary data.
• Compliant List Management: Collaborate with fundraising, bereavement and marketing teams to build compliant data selections, reports, and dashboards in Salesforce without risking privacy drift.
• All Staff
• Contribute to the vision and mission of Child Bereavement UK; whilst embedding the values into your daily work activities.
• Promote equality of opportunity and diversity in accordance with Child Bereavement UK policy.
• Contribute to the overall success of the charity’s fundraising needs by providing case studies, attending events and adding value to the experience of our supporters as required.
• Contribute to the brand and reach of the charity by working alongside our Marketing & Communications Team when relevant press opportunities arise or when required for social media and online content (including the use of photography).
• Work to objectives, targets and work plans agreed with your line manager.
• Undertake specific projects and other ad hoc duties agreed with your line manager, fulfilling any deadlines, reviews and reporting procedures required.
• Take an active part in the Quarterly review process and participate in training agreed with your line manager.
• Recognise and champion the lived experience of children and young people with bereavement within your work.
• Ensure the health and safety of all colleagues, volunteers and visitors in accordance with Child Bereavement UK policy.

Person Specification

• Essential Experience: Proven experience working with Salesforce CRM in a data admin, reporting, or compliance capacity.
• Data Loader & Import Skills: High proficiency with Salesforce data migration tools (e.g., Data Loader) and advanced Excel skills for manipulating data.
• Salesforce Reporting Skills: Strong proficiency in building Salesforce reports, custom report types, dashboards, and managing data filters/logic.
• Regulatory Knowledge: Strong working knowledge of UK GDPR, PECR, and data protection principles applied to charitable fundraising.
• Data Quality Skills: Experience handling data cleansing, deduplication tools, and complex data import/export workflows.
• Communication: Ability to explain data protection rules clearly to non-technical fundraising, bereavement services, operations, and volunteer teams.

• Desirable Certification: Salesforce qualification, or a recognised data protection qualification (e.g., CIPP, CIPM, or ISEB).

Recruitment Timetable

• Application deadline: Sunday 22nd November 2026 at midnight. Child Bereavement UK reserves the right to close the vacancy ahead of this date if a high volume of applications are received.

Interviews

• If you are shortlisted, you will be invited to attend a 1-hour formal interview on MS Teams with the Hiring Managers for the role. It is our policy to share a selection of the role-specific interview questions with applicants ahead of the interview, to aid their preparation. You may also be asked to complete an interview task, which will also be shared with you in advance.