Goodluck Morgan
Summary
A dedicated data protection specialist with a strong understanding of UK GDPR, the Data Protection Act 2018, PECR, and key privacy obligations. Experienced in handling subject access requests, DPIAs, FOI responses, and data breach reporting. Skilled in drafting data protection policies and reviewing data sharing agreements while maintaining RoPA. Proficient in using OneTrust and Microsoft 365 applications to track compliance tasks efficiently. Adept at delivering privacy training and explaining complex data protection matters clearly across legal, IT, HR, and service departments. Committed to maintaining high standards of confidentiality and accuracy with a proactive approach to identifying risks and advising on lawful data use.
Overview
8
8
years of professional experience
11
11
years of post-secondary education
1
1
Certification
Work history
Data Privacy Analyst (contract)
OVO Energy
2023.04 - 2025.09
- Maintain and manage the organisation’s privacy platform (OneTrust), including triaging requests and tracking workflow
- Act as the first point of contact for the privacy team mailbox, responding to queries and escalating as needed
- Assist with subject access requests, right to erasure, and privacy complaints, ensuring timely and lawful responses
- Carry out DPIAs and PIAs for new and existing projects in collaboration with legal, IT, and security teams
- Monitor website and internal tools for privacy compliance, including cookie settings and consent management
- Support investigations into data breaches and log outcomes in accordance with internal policy and legal duties
- Liaise with international teams to support global privacy standards and share good practice
Information Governance Administrator (Part-Time Contract)
North Tyneside Council
2022.08 - 2023.06
- Acted as a central point of contact for information governance queries and complaints.
- Managed SARs and FOI requests from the public, ensuring statutory deadlines and redaction procedures were followed.
- Delivered awareness sessions to support understanding of GDPR and information handling practices.
- Maintained internal IG logs, coordinated IG responses, and reviewed disclosures for sensitive information.
- Supported service teams across social care, housing, and licensing with their data handling responsibilities.
- Assisted the wider IG team with monitoring compliance and preparing data for audits and assurance.
HR Administrator
Pendleton Logistics Ltd
2020.01 - 2022.06
- Processed onboarding and leaver documents for warehouse and administrative staff across multiple UK sites.
- Maintained staff records in internal HR systems and ensured documentation followed retention and access policies.
- Handled subject access requests and internal employee data queries, escalating when necessary.
- Worked closely with payroll, compliance, and operational managers to coordinate staff changes.
- Supported case management tasks, including compiling data for investigations and formal hearings.
- Issued internal GDPR reminders and maintained version control of HR documentation templates.
Customer Service Administrator
Brookview Care Homes
2018.01 - 2019.12
- Acted as the first point of contact for residents, families, and visitors, providing reception and telephone support.
- Handled personal and medical information in line with care home confidentiality procedures.
- Managed appointment bookings, document filing, and updates to resident records.
- Escalated safeguarding concerns or unresolved complaints to senior care staff.
- Maintained clear and accurate logs using the home’s internal systems.
- Contributed to a calm and supportive environment while ensuring all personal data was securely handled.
Education
West African Examination Certificate - WAEC/GCSEs
Gbenoba Grammer School
Agbor, Delta State 2004.01 - 2010.01
National Diploma - Science Laboratory Technology
Delta State Polytechnic
Ozoro, Delta State 2012.01 - 2014.01
Higher National Diploma - Science Laboratory Technology (chemistry option)
Delta State Polytechnic
Ozoro, Delta State 2016.01 - 2018.01
GradDip - Biomedical Science
University of Keele
2022.01 - 2023.01
Skills
- Strong understanding of UK GDPR, the Data Protection Act 2018, PECR, and key privacy obligations
- Experienced in handling subject access requests, DPIA, FOI responses, and data breach reporting
- Skilled in drafting data protection policies, reviewing data sharing and processing agreements, and maintaining RoPA
- Confident using OneTrust, Microsoft 365 applications, and internal systems to track compliance tasks and workflows
- Able to deliver privacy training and explain complex data protection matters in clear, practical terms
- Familiar with records management, retention schedules, and safe data handling practices
- Strong written and verbal communication skills, with experience engaging teams across legal, IT, HR, and service departments
- Analytical and proactive when identifying risks or advising on lawful data use
- Reliable, organised, and committed to maintaining high standards of confidentiality and accuracy
Certification
- Data Protection Officer Training Certificate
- Certified Information Privacy Professionals Europe (CIPP/E in view)
References
References available upon request.
Timeline
Data Privacy Analyst (contract)
OVO Energy
2023.04 - 2025.09
Information Governance Administrator (Part-Time Contract)
North Tyneside Council
2022.08 - 2023.06
GradDip - Biomedical Science
University of Keele
2022.01 - 2023.01
HR Administrator
Pendleton Logistics Ltd
2020.01 - 2022.06
Customer Service Administrator
Brookview Care Homes
2018.01 - 2019.12
Higher National Diploma - Science Laboratory Technology (chemistry option)
Delta State Polytechnic
2016.01 - 2018.01
National Diploma - Science Laboratory Technology
Delta State Polytechnic
2012.01 - 2014.01
West African Examination Certificate - WAEC/GCSEs
Gbenoba Grammer School
2004.01 - 2010.01