Data Protection Analyst in Oxford

Data Protection Analyst required to deliver high-volume Subject Access Requests on a hybrid contract in Oxford. £320 per day for 3 months (with a strong likelihood of extension). Oxford (Central) - hybrid working with light on-site presence (approximately 1 day every two weeks).

Your new organisation: We are working with a large, highly regulated public sector organisation based in Oxford that processes significant volumes of personal and sensitive data. Due to sustained demand across its data protection function, additional interim support is required to ensure Subject Access Requests and other Individual Rights Requests are managed compliantly, accurately and within statutory timescales. The organisation operates in a complex, fast-paced environment where information rights, transparency and lawful data handling are critical. This assignment sits within an established data protection and access to information team and is focused on delivery rather than strategy.

Your new role: This is a hands-on Data Protection Analyst role, suited to a contractor with strong, practical experience processing Subject Access Requests. You will take ownership of a live caseload of SARs and related individual rights requests, managing them end to end from receipt through to lawful disclosure. The work involves locating, reviewing, redacting, and preparing information in accordance with the UK GDPR and Data Protection Act 2018. You will regularly handle complex and high-volume requests, some of which involve highly sensitive or emotionally challenging content, requiring sound judgement, attention to detail, and a calm, proportionate approach. You will be responsible for applying exemptions accurately, including confidentiality, Legal Professional Privilege, and third-party data considerations, and for making defensible decisions on whether information can be released. Acting as the primary point of contact for requestors, you will ensure communication is clear, timely, and appropriate throughout the lifecycle of each request. Alongside your own caseload, you will support the wider team by peer-reviewing responses, covering cases during peak periods, and escalating complex issues where necessary. This is a delivery-focused role where success is measured by quality, compliance and throughput.

What you'll need to succeed: You will have solid, hands-on experience working within data protection or information governance, with a strong track record of processing Subject Access Requests in line with statutory requirements. A working knowledge of UK GDPR and the Data Protection Act 2018 is essential, particularly in relation to individual rights, exemptions, and lawful disclosure. You should be comfortable working autonomously, managing competing deadlines, and maintaining accuracy under pressure. The role requires confidence in making disclosure decisions, resilience when handling sensitive material, and the ability to communicate complex legislative concepts clearly and empathetically to both colleagues and the public. Experience within the public sector or similarly regulated environments such as social care, housing, healthcare, or education is highly advantageous, though not essential for candidates with strong SAR delivery experience.

What you'll get in return: This is a contract with purpose. Alongside a competitive daily rate, you'll gain the flexibility of remote working, the autonomy to lead a high-impact project and the chance to make a real difference in a respected organisation delivering services that change lives.

What you need to do now: If you're ready to bring your Data protection expertise to a purpose-driven organisation, click 'apply' to submit your CV and begin a confidential conversation.