Data Protection Coordinator

Chime Housing is committed to providing brilliant homes and services for our residents across Watford and beyond. Following the merger of Watford Community Housing and Thrive Homes, we are investing in our data protection capability to ensure our Group is compliant, well-governed, and trusted by the people we serve.

We are now looking for a Data Protection Coordinator to join us and work alongside our Group Data Protection Officer. This is a hands-on operational role where you will make a real difference by keeping our records in shape, supporting residents who make data requests, and helping the wider organisation build good data protection habits.

Role purpose: To provide reliable operational data protection support to the Group DPO, helping Chime Housing deliver consistent compliance across the Group, with a particular focus on building capability and embedding good practice across the organisation.

Key Accountabilities:

• Handle Data Subject Access Requests (DSARs) from initial receipt through to preparing the response pack, ready for the Group DPO to review and sign off.
• Maintain all data protection registers - including the Data Asset Register (ROPA), and processor and controller records by keeping them accurate and up to date.
• Liaise with Data Champions across Chime Housing Group to prompt timely updates to the Data Asset Register and support their engagement with data governance.
• Carry out data protection due diligence for standard supplier relationships: obtain assurances, review responses, and file them alongside contracts and agreements.
• Log data protection incidents and near-misses accurately on the incident log and escalate to the Group DPO for assessment and decision.
• Produce monthly KPI reports on data protection activity, drawing on registers and logs to provide clear management information.
• Support scheduled reviews of data protection policies and help draft written procedures for routine compliance processes.
• Provide general administrative and coordination support to the Group DPO as needed.

What are we looking for?

Essential:

• Experience handling Data Subject Access Requests, or a clear and demonstrable understanding of the DSAR process under UK GDPR.
• Working knowledge of UK GDPR, Data Protection Act 2018 and the Data Use and Access Act (DUAA) 2025 framework.
• Experience maintaining compliance records, registers, or logs; and an organised, methodical approach to doing so.
• Good written communication skills: able to draft clear, accurate documentation and correspondence.
• Strong attention to detail and the ability to manage multiple tasks against deadlines.
• Proficiency in Microsoft Office (Word, Excel, PowerPoint, Outlook).
• A discreet and professional approach to handling sensitive personal information.

Desirable:

• Experience in housing, local government, or another regulated sector.
• A data protection qualification or certificate (e.g. BCS Foundation Certificate in Data Protection, CIPPE, or similar).
• Familiarity with supplier due diligence or DPIA processes.
• Experience producing management information or performance reports.

Who you’ll work with:

Responsible to: Group Data Protection Officer

Department: Information and Technology Services

What can we offer you?

• 28 days’ annual leave (pro rata)
• Employer pension contribution of up to 11%
• Development opportunities
• Comprehensive employee rewards scheme

How we work: We embrace agile working — blending time in our communities, shared spaces, and remote working. With digital technology at the heart of our approach, we empower teams and individuals to work flexibly.

How to apply: If this sounds like your next role, click ‘apply now’, tell us why you’ve got what it takes, and attach a copy of your current CV.

Closing date: 24th July 2026

Interviews: to be confirmed (Please note we reserve the right to close the vacancy early if we receive a large response.)