Negotiable
Undetermined
Hybrid
London Area, United Kingdom
Summary: The role of Privacy & Data Protection Consultant focuses on leading the planning and delivery of a comprehensive Register of Processing Activities (RoPA) for a leading global retailer's EMEA headquarters in London. This hands-on position requires collaboration with various teams to ensure compliance with GDPR requirements while managing stakeholder engagement through workshops and interviews. The consultant will be responsible for creating and maintaining a delivery plan, producing RoPA entries, and ensuring quality assurance throughout the process. The position is primarily remote with occasional visits to the London office.
Key Responsibilities:
- Create and maintain a prioritised RoPA delivery plan, including sequencing of business units, timelines, and dependencies
- Pre-populate RoPA entries using existing PIAs, privacy notices, records, and policies to reduce burden on business teams
- Coordinate communications, scheduling, and virtual workshops with business units and process owners
- Lead structured RoPA workshops and interviews, using standardised question sets and evidence capture templates
- Produce complete RoPA entries using approved templates, including Privacy / DPIA Threshold Assessments
- Manage information gaps, follow-ups, and quality assurance through to business unit acceptance
- Provide regular progress updates, risks, issues, and escalations in line with established project governance
Key Skills:
- Strong experience delivering RoPA programmes in complex, multi-function organisations
- Solid understanding of GDPR, privacy governance, and data protection risk assessments
- Confidence running stakeholder workshops and interviews at varying levels of seniority
- Highly organised, with proven experience managing delivery plans and multiple workstreams
- Comfortable working within established governance and reporting frameworks
- Experience in retail, consumer, technology, or multinational environments is a plus
Salary (Rate): undetermined
City: London
Country: United Kingdom
Working Arrangements: hybrid
IR35 Status: undetermined
Seniority Level: undetermined
Industry: Other
Privacy & Data Protection Consultant Register of Processing Activities (RoPA) – EMEA Day rate contract - competitive rate Mostly remote working and visits to London offices 6 months A leading global high-street retailer is seeking an experienced Privacy & Data Protection Consultant to lead the planning and delivery of a comprehensive Register of Processing Activities (RoPA) for the EMEA HQ in London This is a hands-on, delivery-focused role working closely with Privacy, Legal, Technology and business teams to map processing activities, conduct structured workshops, and build high-quality RoPA entries aligned to GDPR requirements.
The Role You will plan, coordinate, and deliver end-to-end RoPA coverage across multiple business units, leveraging existing privacy documentation and engaging stakeholders through VC interviews and workshops. You’ll act as a trusted partner to the central Privacy team, ensuring work is delivered in line with agreed governance, timelines, and quality standards.
Key Responsibilities
- Create and maintain a prioritised RoPA delivery plan, including sequencing of business units, timelines, and dependencies
- Pre-populate RoPA entries using existing PIAs, privacy notices, records, and policies to reduce burden on business teams
- Coordinate communications, scheduling, and virtual workshops with business units and process owners
- Lead structured RoPA workshops and interviews, using standardised question sets and evidence capture templates
- Produce complete RoPA entries using approved templates, including Privacy / DPIA Threshold Assessments
- Manage information gaps, follow-ups, and quality assurance through to business unit acceptance
- Provide regular progress updates, risks, issues, and escalations in line with established project governance
Scope of Engagement The role will cover a broad range of business departments, including: People / HR (Talent, Payroll, DEI, Learning & Development) Finance Brand, Marketing, Digital, Loyalty, Insights & Analytics Technology & Cybersecurity, including retail and digital platforms Retail Operations and Licensee Operations Legal, Ethics & Compliance, Data Privacy, Security & Resilience Public Affairs Store Development & Design Supply Chain Operations
What We’re Looking For Strong experience delivering RoPA programmes in complex, multi-function organisations Solid understanding of GDPR, privacy governance, and data protection risk assessments Confidence running stakeholder workshops and interviews at varying levels of seniority Highly organised, with proven experience managing delivery plans and multiple workstreams Comfortable working within established governance and reporting frameworks Experience in retail, consumer, technology, or multinational environments is a plus