Summary
Overview
Work history
Education
Skills
Certification
Additional Information
Timeline
Generic

Doyinsola Aruna

Nottingham,Nottinghamshire

Summary

A seasoned legal, privacy, risk management, and regulatory compliance professional with extensive expertise in data protection laws, including GDPR and the Data Protection Act. I excel in conducting privacy risk assessments, implementing compliance frameworks, and providing strategic advice to mitigate risks. My experience includes legal drafting, stakeholder engagement, and managing privacy risks in innovative projects and technologies. Currently pursuing the CIPP/E certification to further solidify my expertise in data privacy and compliance. Committed to maintaining the highest standards of confidentiality, ethical behaviour, and data governance.

Overview

4
4
years of professional experience
7
7
years of post-secondary education
1
1
Certification

Work history

Compliance Officer

Link3 Recruitment Education & Training Agency
Nottingham
09.2024 - 04.2025
  • Ensured adherence to education recruitment regulations, employment laws, and industry standards
  • Conducted comprehensive background checks, including right-to-work documentation and criminal record (DBS) verifications
  • Maintained and securely stored candidate records in compliance with GDPR and data protection requirements
  • Provided guidance to recruitment consultants and management on safeguarding and compliance requirements
  • Investigated and resolved instances of non-compliance, conducting thorough risk assessments and reporting findings
  • Promoted safeguarding and privacy practices across recruitment and placement processes to ensure safe educational environments
  • Monitored expiration dates of essential documents (e.g., DBS checks, and certifications) and ensured timely renewals
  • Compiled, prepared, and submitted detailed compliance reports to company directors ensuring timely and accurate reporting to support compliance and policy development
  • Liaised with other department to identify compliance-related risks and developed strategies to mitigate them effectively
  • Develop, review, and update internal compliance policies related to recruitment

Customer Service Administrator

Trent College and The Elms
Nottingham
09.2023 - 03.2024
  • Crafted comprehensive attendance policies and procedures aimed at promoting punctuality and regular attendance
  • Oversaw their consistent implementation across the institution
  • Coordinated and responded to data subject access requests (DSARs) in accordance with legal requirements, ensuring timely and accurate responses to individuals' requests regarding their personal data
  • Conducted DPIAs for new school projects and processes, assessing the impact on data privacy and implementing measures to mitigate any potential risks
  • Actively communicated attendance policies and expectations to students and parents, enhancing awareness and fostering a collaborative effort to improve attendance
  • Ensured thorough child safeguarding and welfare through diligent monitoring and risk assessments
  • Compiled, prepared, and submitted detailed attendance reports to school administration and regulatory bodies, ensuring timely and accurate reporting to support compliance and policy development
  • Identified potential risks related to attendance and developed proactive strategies to mitigate these risks, ensuring the school's compliance and safeguarding student welfare

SCR Outreach Officer

Nottingham Trent University
Nottingham
11.2022 - 08.2023
  • Conducted crisis interventions and student support programs
  • Provided guidance on academic and personal challenges in one-to-one and group settings
  • Identified safeguarding concerns and reported them to the appropriate authorities
  • Adhered to strict confidentiality protocols to safeguard and accurately store student information
  • Mentored students to identify skills and assets to maximise potential
  • Networked with fellow outreach ambassadors and staff to share and develop best practices (which included attendance of training, reviewing, and evaluating meetings)
  • Identified instances of potential neglect or abuse and reported issues to authorities

Data Protection Advisor

Alex Ejesieme & Co
05.2022 - 08.2022
  • Company Overview: Nigeria
  • Led the review of organisational policies to align with updated data protection regulations post-GDPR enforcement
  • Acted as the primary contact with data protection authorities and regulatory bodies, facilitating audits, inspections, and addressing any compliance-related inquiries or issues
  • Led the response to data breaches, including investigation, documentation, reporting to relevant authorities, and implementing corrective actions to prevent future incidents
  • Provided privacy advice, negotiated agreements, and contracts to protect clients' interests and ensure data processing compliance
  • Met compliance targets and turnaround times, consistently achieving individual and team performance targets
  • Regularly conducted risk assessments to identify potential threats to data privacy and security, implementing strategies to mitigate identified risks effectively
  • Nigeria

Legal Associate

Pinnacle Health and Environmental Services
06.2021 - 04.2022
  • Company Overview: Nigeria
  • Drafted legal correspondence on behalf of partners, using attention to detail and communication skills to produce error-free documents
  • Developed and managed data retention schedules, ensuring that data was retained and disposed of in accordance with legal and regulatory requirements
  • Established and led information governance committees, facilitating regular meetings to discuss strategies, review incidents, and ensure coordinated efforts across the organisation
  • Fostered a culture within the organisation that prioritises data protection and information governance, encouraging ethical behaviour and proactive risk management
  • Regularly reviewed and assessed the effectiveness of information governance programs, making continuous improvements to policies, procedures, and practices
  • Negotiated data protection agreements, ensuring compliance with privacy laws, defining data responsibilities, and mitigating privacy risks for clients and third-party vendors
  • Nigeria

Education

LLM - Technology Law

Nottingham Trent University
09.2022 - 09.2023

BL -

Nigerian Law School
02.2020 - 07.2021

LLB - Law

Afe Babalola University
09.2014 - 10.2019

Skills

  • Data Protection & Governance
  • Regulatory Compliance
  • Risk Management
  • Policy Implementation & Analysis
  • Stakeholder Engagement
  • Contract Drafting & Negotiation
  • Communication & Collaboration
  • Client & Customer Relations
  • Record & Information Management
  • Microsoft Office & Excel

Certification

  • CIPP/E, In Progress
  • Data Discovery & Governance Professional, One Trust
  • Disclosure Professional, One Trust
  • Disclosure Expert, One Trust
  • Tech Risk & Compliance Professional, One Trust

Additional Information

Strong knowledge of the UK Data Protection Act 2018 and GDPR, Excellent problem-solving skills and ability to translate regulatory requirements into actionable policies. Ability to work collaboratively with diverse teams and stakeholders to ensure compliance and mitigate risks, Enthusiastic about fostering a culture of compliance, ethics, and continuous improvement within organisations.

Timeline

Compliance Officer

Link3 Recruitment Education & Training Agency
09.2024 - 04.2025

Customer Service Administrator

Trent College and The Elms
09.2023 - 03.2024

SCR Outreach Officer

Nottingham Trent University
11.2022 - 08.2023

LLM - Technology Law

Nottingham Trent University
09.2022 - 09.2023

Data Protection Advisor

Alex Ejesieme & Co
05.2022 - 08.2022

Legal Associate

Pinnacle Health and Environmental Services
06.2021 - 04.2022

BL -

Nigerian Law School
02.2020 - 07.2021

LLB - Law

Afe Babalola University
09.2014 - 10.2019
Doyinsola Aruna