About this role
Job summary Package Description: At Avery Healthcare, our commitment to exceptional care begins with the people who deliver it. We champion our teams, invest in their growth, and create an environment where professionalism, respect, and purpose guide everything we do. We are now seeking an experienced Subject Access Request Administrator to join our central support team based in Northampton. Working in close partnership with our National Data Protection Officer, you will play a vital role in safeguarding the rights, privacy, and dignity of our residents, colleagues, and families. About the Role This position is responsible for coordinating and managing Subject Access Requests (SARs) and other data rights requests across Avery Healthcare, ensuring full compliance with UK GDPR and the Data Protection Act 2018. You will act as a key liaison between the National DPO, care homes, regional teams, and external requestors, ensuring that all disclosures are lawful, accurate, and handled with the highest level of professionalism.
Main duties of the job As a Subject Access Request Administrator at Avery Healthcare, the role focuses on managing and coordinating SARs ensuring compliance with UK GDPR and the Data Protection Act 2018. The position involves close collaboration with Avery's National Data Protection Officer and various stakeholders including care homes, regional teams, and external requestors. Key responsibilities include gathering and reviewing information, applying redactions, maintaining audit trails, and supporting stakeholders with guidance. The role demands strong organisational skills, excellent communication, attention to detail, and experience in data protection or information governance.
About us Avery Healthcare is among the UK's leading providers of luxury elderly care, managing over 100 homes across the nation. The company's ethos centers around delivering care with dignity, purpose, and compassion, aligning with its vision of 'creating meaningful lives together.' Avery fosters a supportive and empowering workplace culture, focusing on professional growth and ensuring employees feel valued. The organisation emphasizes the importance of a collaborative environment, which is integral to enhancing the quality of care and overall resident experiences.
Job description Job responsibilities Package Description:
At Avery Healthcare, our commitment to exceptional care begins with the people who deliver it. We champion our teams, invest in their growth, and create an environment where professionalism, respect, and purpose guide everything we do.
We are now seeking an experienced Subject Access Request Administrator to join our central support team based in Northampton. Working in close partnership with our National Data Protection Officer, you will play a vital role in safeguarding the rights, privacy, and dignity of our residents, colleagues, and families.
About the Role
This position is responsible for coordinating and managing Subject Access Requests (SARs) and other data rights requests across Avery Healthcare, ensuring full compliance with UK GDPR and the Data Protection Act 2018. You will act as a key liaison between the National DPO, care homes, regional teams, and external requestors, ensuring that all disclosures are lawful, accurate, and handled with the highest level of professionalism.
Key Responsibilities SAR Coordination Receive, log, and acknowledge SARs and data rights requests; manage the endtoend process in collaboration with the National DPO; ensure statutory deadlines are met.
Information Gathering Work closely with care homes, regional teams, and support functions to obtain all relevant documentation.
Document Review & Redaction Review care records, HR files, incident reports, and other sensitive materials; apply precise redaction to protect thirdparty and confidential information; ensure disclosures are proportionate and compliant.
Compliance & Governance Maintain accurate audit trails; ensure all activity aligns with UK GDPR, the Data Protection Act 2018, and Avery policies; escalate complex or highrisk cases appropriately.
Stakeholder Support Provide clear guidance to care home teams on documentation standards and information provision; respond professionally to requestors, families, and external bodies.
Continuous Improvement Support enhancements to SAR processes, templates, and tracking systems; contribute to internal audits and compliance reporting; promote dataprotection best practice across the organisation.
About You
Youll be someone who naturally lives our values caring, supportive, honest, respectful, and accountable and brings them into everything you do.
Skills & Experience Experience managing SARs or working within data protection / information governance
Strong understanding of UK GDPR and the Data Protection Act 2018
Experience handling sensitive personal data, ideally within a healthcare or carehome environment
Excellent attention to detail, particularly in document review and redaction
Strong organisational skills with the ability to manage competing deadlines
Confident communicator with the ability to engage professionally at all levels
Personal Attributes Professional, discreet, and trustworthy
Methodical and highly organised
Able to work independently and prioritise effectively
Calm and resilient when managing complex or sensitive cases
Desirable Experience in a healthcare or carehome setting
Awareness of CQC expectations relating to recordkeeping and data protection
About Avery
Avery Healthcare is one of the UKs leading providers of luxury elderly care, with over 100 homes nationwide. Guided by our vision of creating meaningful lives together, we foster a culture where colleagues feel supported, empowered, and valued. We believe in delivering care with dignity, purpose, and compassion and in creating a workplace where people genuinely enjoy being part of the team.
Additional Information
A DBS Disclosure is required (funded by Avery Healthcare)
Proof of eligibility to work in the UK is essential
Occasional travel to care homes or other Avery sites may be required
This advert may close early depending on application volume
Person Specification
Qualifications Essential
Experience managing SARs or working within data protection/information governance. Strong understanding of UK GDPR and the Data Protection Act 2018. Experience handling sensitive personal data, ideally within a healthcare or care-home environment.
Disclosure and Barring Service Check This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.
Employer details Employer name Avery Healthcare Group Ltd.
Address Avery Healthcare
Nothampton
NN4 9BS
United Kingdom
Employer's website https://www.averyhealthcare.co.uk/ (Opens in a new tab)