Privacy Analyst
Accountable for preparing impact assessments, disclosure reviews and records of processing under the direction of the Data Protection Officer.
4tasks in this job
19skills it uses
7tools named
The skills this job leans on most
- 1Locating and acting on personal data for individual rights requestsNeeded in 4 of 4 tasks
- 2Assessing privacy risk through data protection impact assessmentsNeeded in 4 of 4 tasks
- 3Controlling disclosure risk in shared data and outputsNeeded in 4 of 4 tasks
- 4Mapping personal data processing and flowsNeeded in 4 of 4 tasks
- 5Applying exemptions and third-party redaction to rights responsesNeeded in 1 of 4 tasks
ToolsServiceNowOneTrustTrustArcMicrosoft ExcelSalesforceWorkdayDPOrganizer
All 4 tasks, where people get stuck and all 19 skills
Tasks
- Triage a suspected data security or personal data breach and preserve evidence
- Conduct or review a data protection impact assessment for a data, analytics or AI processing
- Fulfil a data subject rights request with a lawful, redacted response
- Map personal data processing and maintain the record of processing activities
Where people get stuck
- Assessing lawful basis, purpose compatibility and minimisation for data reuse
- Interpreting policy scope and delegated authority limits
All skills
- Locating and acting on personal data for individual rights requests
- Mapping personal data processing and flows
- Applying data classification and handling rules
- Assigning and operating data ownership and stewardship
- Designing testable data controls
- Enforcing and auditing data access
- Escalating unresolved risks with evidence and clear ownership
- Explaining control types, dependencies and compensating controls
- Finding relevant data sources
- Judging whether and how to use AI for a task
- Preserving incident evidence and timeline
- Recognising and containing suspected personal data breaches
- Recognising cybersecurity threats to data work
- Recognising personal data and privacy duties
- Recognising statutory incident reporting duties and deadlines
- Record-keeping requirements for processing activities and AI systems
- Tracing data lineage upstream and downstream
- Validating records by matching, recomputation and end-to-end tracing
- Writing data quality rules
Paths to start
Tool Path
Excel for Analysis and Decision Models
Build and check Excel workbooks others can trust.
- Modules
- 5 open
- Runs in
- Your browser
Skill Path
Privacy, Security and Access for Data and AI
Protect personal data and access with impact assessments and incident evidence.
- Modules
- 5 open
- Practice data
- Raket Parts
5tasks in this job
36skills it uses
10tools named
The skills this job leans on most
- 1Assessing privacy risk through data protection impact assessmentsNeeded in 5 of 5 tasks
- 2Assessing lawful basis, purpose compatibility and minimisation for data reuseNeeded in 5 of 5 tasks
- 3Controlling disclosure risk in shared data and outputsNeeded in 5 of 5 tasks
- 4Mapping personal data processing and flowsNeeded in 5 of 5 tasks
- 5Discovering undeclared data processing and AI use from operational evidenceNeeded in 1 of 5 tasks
ToolsOneTrustHubSpotGoogle Tag ManagerSalesforceServiceNowBigID+ 4 more
All 5 tasks, where people get stuck and all 36 skills
Tasks
- Review a proposed use, reuse, disclosure of or access to data and record the permitted-use decision
- Triage a suspected data security or personal data breach and preserve evidence
- Conduct or review a data protection impact assessment for a data, analytics or AI processing
- Fulfil a data subject rights request with a lawful, redacted response
- Map personal data processing and maintain the record of processing activities
Where people get stuck
- Assessing privacy risk through data protection impact assessments
- Assessing lawful basis, purpose compatibility and minimisation for data reuse
- Interpreting policy scope and delegated authority limits
All skills
- Assessing lawful basis, purpose compatibility and minimisation for data reuse
- Assessing privacy risk through data protection impact assessments
- Controlling disclosure risk in shared data and outputs
- Discovering undeclared data processing and AI use from operational evidence
- Mapping personal data processing and flows
- Analysing error patterns and failure modes in models and AI systems
- Applying data classification and handling rules
- Applying exemptions and third-party redaction to rights responses
- Assessing data-service continuity and recoverability
- Assessing supplier dependency, data-handling and exit risk
- Assigning and operating data ownership and stewardship
- Building data protection by design into data products and pipelines
- Classifying AI uses against regulatory obligations
- Designing testable data controls
- Enforcing and auditing data access
- Escalating unresolved risks with evidence and clear ownership
- Evaluating fitness and full cost of AI-assisted work
- Evaluating responsible AI use risks
- Exercising human oversight of automated and AI outputs
- Explaining control types, dependencies and compensating controls
- Finding relevant data sources
- Interpreting policy scope and delegated authority limits
- Judging whether and how to use AI for a task
- Locating and acting on personal data for individual rights requests
- Monitoring model fitness and drift
- Preserving incident evidence and timeline
- Rating risks against appetite and choosing proportionate treatment
- Recognising and containing suspected personal data breaches
- Recognising cybersecurity threats to data work
- Recognising personal data and privacy duties
- Recognising statutory incident reporting duties and deadlines
- Record-keeping requirements for processing activities and AI systems
- Resolving consent and suppression status across systems
- Tracing data lineage upstream and downstream
- Validating records by matching, recomputation and end-to-end tracing
- Writing data quality rules
All tools
- OneTrust
- HubSpot
- Google Tag Manager
- Salesforce
- ServiceNow
- BigID
- DPOrganizer
- TrustArc
- Microsoft Excel
- Google Analytics 4
Paths to start
Skill Path
Data Literacy for Business Decisions
Judge whether a business claim from a table, KPI, chart or dashboard really holds up.
- Modules
- 5 open
- Practice data
- Raket Parts
Tool Path
Excel for Analysis and Decision Models
Build and check Excel workbooks others can trust.
- Modules
- 5 open
- Runs in
- Your browser
Skill Path
Privacy, Security and Access for Data and AI
Protect personal data and access with impact assessments and incident evidence.
- Modules
- 5 open
- Practice data
- Raket Parts
6tasks in this job
46skills it uses
8tools named
The skills this job leans on most
- 1Assessing privacy risk through data protection impact assessmentsNeeded in 6 of 6 tasks
- 2Assessing lawful basis, purpose compatibility and minimisation for data reuseNeeded in 6 of 6 tasks
- 3Controlling disclosure risk in shared data and outputsNeeded in 6 of 6 tasks
- 4Interpreting policy scope and delegated authority limitsNeeded in 6 of 6 tasks
- 5Building data protection by design into data products and pipelinesNeeded in 6 of 6 tasks
ToolsOneTrustGoogle Tag ManagerServiceNowDPOrganizerTrustArcBigID+ 2 more
All 6 tasks, where people get stuck and all 46 skills
Tasks
- Review a proposed use, reuse, disclosure of or access to data and record the permitted-use decision
- Evaluate an AI use case for suitability, value and risk before adoption
- Triage a suspected data security or personal data breach and preserve evidence
- Conduct or review a data protection impact assessment for a data, analytics or AI processing
- Fulfil a data subject rights request with a lawful, redacted response
- Map personal data processing and maintain the record of processing activities
Where people get stuck
- Assessing privacy risk through data protection impact assessments
- Assessing lawful basis, purpose compatibility and minimisation for data reuse
- Interpreting policy scope and delegated authority limits
All skills
- Assessing lawful basis, purpose compatibility and minimisation for data reuse
- Assessing privacy risk through data protection impact assessments
- Building data protection by design into data products and pipelines
- Controlling disclosure risk in shared data and outputs
- Interpreting policy scope and delegated authority limits
- Analysing error patterns and failure modes in models and AI systems
- Applying data classification and handling rules
- Applying exemptions and third-party redaction to rights responses
- Assessing data-driven fairness and bias
- Assessing data-service continuity and recoverability
- Assessing supplier dependency, data-handling and exit risk
- Assigning and operating data ownership and stewardship
- Classifying AI uses against regulatory obligations
- Designing testable data controls
- Diagnosing misleading data visualisations
- Disclosing AI contribution to professional work
- Discovering undeclared data processing and AI use from operational evidence
- Enforcing and auditing data access
- Escalating unresolved risks with evidence and clear ownership
- Evaluating fitness and full cost of AI-assisted work
- Evaluating responsible AI use risks
- Exercising human oversight of automated and AI outputs
- Explaining control types, dependencies and compensating controls
- Finding relevant data sources
- Giving specific developmental feedback on data and AI work
- Independently checking analytical conclusions and claims
- Judging the materiality of defects and deficiencies for the intended use
- Judging whether and how to use AI for a task
- Locating and acting on personal data for individual rights requests
- Mapping personal data processing and flows
- Monitoring model fitness and drift
- Preserving incident evidence and timeline
- Rating risks against appetite and choosing proportionate treatment
- Recognising and containing suspected personal data breaches
- Recognising cybersecurity threats to data work
- Recognising personal data and privacy duties
- Recognising statutory incident reporting duties and deadlines
- Record-keeping requirements for processing activities and AI systems
- Resolving consent and suppression status across systems
- Sampling and reviewing a team's work against standards
- Testing competing explanations with discriminating evidence
- Tracing data lineage upstream and downstream
- Validating records by matching, recomputation and end-to-end tracing
- Verifying AI-assisted outputs against sources
- Verifying reports and dashboards before and after release
- Writing data quality rules
All tools
- OneTrust
- Google Tag Manager
- ServiceNow
- DPOrganizer
- TrustArc
- BigID
- Salesforce
- Workday
Paths to start
Skill Path
Data Literacy for Business Decisions
Judge whether a business claim from a table, KPI, chart or dashboard really holds up.
- Modules
- 5 open
- Practice data
- Raket Parts
Tool Path
Excel for Analysis and Decision Models
Build and check Excel workbooks others can trust.
- Modules
- 5 open
- Runs in
- Your browser
Skill Path
Privacy, Security and Access for Data and AI
Protect personal data and access with impact assessments and incident evidence.
- Modules
- 5 open
- Practice data
- Raket Parts
About the role
Accountable for preparing impact assessments, disclosure reviews and records of processing under the direction of the Data Protection Officer. Gathers the facts about how data, analytics and AI processing works and gives first findings on its risk. Prepares evidence and proposed conditions rather than giving the independent advice that the Data Protection Officer gives.
Also called Data Protection Analyst, Information Governance Officer