Emmanuel Osa
Chatham,Kent
Summary
Highly skilled and knowledgeable Data Protection Analyst with a proven track record of ensuring compliance with the relevant data protection legislations and industry best practices. Adept at implementing and maintaining data protection strategies, policies, and procedures to safeguard an organisation’s information assets. Possesses in-depth knowledge of data privacy laws and regulations, including GDPR. Demonstrated ability to assess data security risks, design robust controls, and educate teams to foster a culture of data protection.
Overview
5
5
years of professional experience
8
8
years of post-secondary education
1
1
Certification
Work history
Data Protection Analyst
Kent and Medway Mental Health Trust
2024.05 - 2026.04
- Checking completed DSAR requests to ensure all requested data is fully gathered in line with established processes.
- Carried out training to all staff, raising awareness of Data Protection and fostering a data privacy culture throughout the company.
- Recommend and agree appropriate risk mitigations and solutions with internal and external stakeholders, helping to embed a compliance culture which promotes the concept of data protection by design and default.
- Ensuring that the importance of data protection compliance is promoted and communicated across the business and also being the main contact point for all data protection related enquiries and queries.
- Monitor changes in data-protection laws/regulations and internal policy, track compliance requirements, and flag risks or compliance gaps, helping to keep DWP’s processes and systems up to date.
- Support audits, quality assurance, and compliance monitoring, ensuring DWP meets internal and external standards for data security, retention, and information governance.
- Collaborate with colleagues in legal, digital, security, IT, operations, and other relevant teams to support data-protection implementation across a large and complex department like DWP.
- Train and advise staff on the provisions of the Data Protection with emphasis on GDPR/ Data Protection Act 2018.
- Identify and monitor the activities of employees that process personal data, ensuring that they deal with data in a manner consistent with the data protection principles especially in line with the GDPR/DPA 2018.
- Ensuring that the rights of data subjects are always upheld and reporting to the regulators where.
- Help maintain and update internal records of processing activities, to map where and how personal data is stored, used and shared across DWP systems.
- Updating the Record of processing activity in line with article 30 of the UK GDPR.
- Investigate personal data breaches, providing prompt support for urgent incidents and, where the threshold is met and in consultation with senior stakeholders, complete detailed regulator referrals within a statutory deadline of 72 hours.
- Manage the completion of Data privacy impact assessment in compliance with Article 35 of the UK GDPR.
- Any breach occurs.
- Applying appropriate exemptions to the right of subject access where required.
- (Contract)
Legal Associate
Bridge Solicitors
2021.10 - 2023.08
- Produced comprehensive reports, legal opinions, and in-depth research on intricate matters impacting client transactions, ensuring informed decision-making and minimizing potential risks.
- Prepared and reviewed legal documents, contracts, and correspondence, ensuring meticulous compliance with regulations, especially within the litigation and commercial sectors.
- Organised and monitored intricate systems of files, incoming correspondences, and court processes, reducing administrative complexities and ensuring swift access to essential information.
- Developed and delivered training sessions to cultivate a compliance-conscious mindset among colleagues, fostering an environment where regulatory adherence and data protection are integral.
- Conducted regular risk assessments and audits, resulting in a 20% reduction in compliance violations and mitigating potential legal risks.
- Prepared and reviewed legal documents, contracts, correspondence and client updates.
- Organised and tracked systems of files, incoming correspondence and court processes.
- Assisted with client and witness interview.
- Conducted extensive research into case laws and regulations to support corporate transactions and litigation strategies.
- Drafted and reviewed a variety of legal documents such as contracts, case pleadings, and regulatory filings to meet high legal standards.
- Provided comprehensive legal advisory services covering litigation, regulatory compliance, and corporate governance matters.
- Assisted with case preparation by drafting witness statements, compiling evidence, and liaising with stakeholders for court proceedings.
- Coordinated schedules, arranged meetings, and prepared agendas for internal and external stakeholders.
Data Protection Administrator
Apex Solicitors
2021.09 - 2023.05
- Managing and executing training in data protection across the business.
- Development and maintenance of a data protection knowledge base for the business and creating training material for internal staff members.
- Ensuring compliance with the data protection act and reporting breaches where identified.
- Applying appropriate exemptions to the right of subject access where required.
- Ensuring good inter-personal communication with subject access request handlers and senior management to ensure problem areas are discussed and tackled in line with laid down policies.
- Ensuring compliance with bank and regulatory policy, identifying the need for action where necessary to minimize risk.
- Maintaining customers’ up to date record and file data.
- Dealing with responses and requests for further information with the ICO.
- Involved with redacting personal data when dealing with data subject rights whilst updating our consent register using the data protection management system.
- Manage the review of contracts when new suppliers are onboarded to ensure they meet the requirements of Article 28 of the UK GDPR.
- Assist in the development and delivery of comprehensive data protection training including face-to-face and on-line training.
- Acting as a subject matter expert, I have responsibility for providing high-level expert advice to the business in relation to changes in legislation and ICO guidance with regards to dealing with data subject requests.
- Ensuring compliance with the data protection act and reporting high risk breaches to the ICO and/or Data Subject where identified.
- Administration, development and maintenance of central logs relating to requests for personal data, data breaches and ICO complaints.
- Managed the DPO inbox and dealt with queries and requests from data subjects in a timely manner.
- Provide frontline support to the wider business and internal stakeholders.
- (Contract)
Education
Post Graduate Cert. - Business Admin
Heriot-Watt University
London 2014.08 - 2015.12
Bachelor of Laws - BL
Nigeria Law School
Abuja 2007.09 - 2009.09
LLB (Hons) - Law
University of Benin
Nigeria 2002.10 - 2007.09
Skills
- Strong knowledge of and application of the appropriate exemptions that exist when processing a DSAR request
- Excellent Analytical and problem-solving skills
- Broad understanding of applicable European and local Privacy laws and regulations such as GDPR
- Self-confident, with an excellent ability to make decisions on sensitive/difficult issues under great time pressures
- Strong training facilitation skills and experience in developing training material
- Excellent communication skills (written and spoken)
- Passionate about continuous business improvement
- Experience of working to tight deadlines with limited resource
- Knowledge of complaint handling procedures, regulations and risk requirements
- To build constructive and collaborative relationships across business lines
- Great collaborative skills with an ability to work in a fast-paced environment whilst ensuring accuracy
- Proactive and taking initiative in implementing creative result-oriented solutions
- Strong awareness of successfully managing data subject requests with the specified time frame
- Proficiency in using Microsoft office packages
Certification
- Practicing Certificate (SRA) Data Law CPD trainings
- Information governance
- Documents Analytical Skills
- Outlook, Power point and Excel
510
+447460851
Timeline
Data Protection Analyst
Kent and Medway Mental Health Trust
2024.05 - 2026.04
Legal Associate
Bridge Solicitors
2021.10 - 2023.08
Data Protection Administrator
Apex Solicitors
2021.09 - 2023.05
Post Graduate Cert. - Business Admin
Heriot-Watt University
2014.08 - 2015.12
Bachelor of Laws - BL
Nigeria Law School
2007.09 - 2009.09
LLB (Hons) - Law
University of Benin
2002.10 - 2007.09