UK

United Kingdom · Compliance Quality Health Safety · Mid-Level (2-5 years)

Data Protection Assistant

Here is the whole job, in plain words. What it is, a real day, what you decide, how you're judged, how people get here and where they go next. Then the part no course gives you: twelve AI tutors who learn your work.

  • Experience bandMid-Level (2-5 years)
  • Direct reportsNo direct reports
  • Reports toSenior Data Protection Assistant
  • UK framework levelUsually a coordinator, or early in a professional job

Also advertised as Privacy Analyst · Compliance Assistant (Data Protection) · Data Privacy Coordinator

Built on an analysis of 43,079 real UK job descriptions · grounded in qualifications employers recognise

Start with a free Future Fluency check, tuned to Data Protection Assistant

Ten quick questions, one per Future Fluency, asked against this role rather than a generic one. About five minutes, and no card.

Start the check, free

1What this role really is

This role is all about keeping our customer and employee data safe and sound, making sure we stick to the rules. You'll be the person who actually processes requests from individuals wanting to know what data we hold on them, and you'll help keep our records of how we process data up to scratch. It's a hands-on job where accuracy really matters, because honestly, one slip-up can lead to big trouble. Think of yourself as a guardian of trust, making sure we do right by everyone whose data we touch.

2What you'd actually use

The tools this job runs on, and how well you'd need to know each one.

OneTrust (Privacy Management Platform)Intermediate

Executing tasks within modules for DSAR requests, managing cookie consent, and entering data into RoPA.

Jira Service Management (Request & Incident Mgmt)Intermediate

Managing ticket queues for DSARs and privacy inquiries, logging incident details, and following escalation protocols.

Microsoft 365 (SharePoint, Teams, Purview)Intermediate

Maintaining the RoPA in SharePoint lists, managing evidence collection for DPIAs, and using Teams for internal coordination.

Excel (Power Query, XLOOKUP)Advanced

Managing complex registers (RoPA, breach logs), using pivot tables for basic reporting, and organising data for DSARs.

Adobe Acrobat Pro (Redaction)Basic

Applying redactions to documents following a clear guide for DSAR fulfilment.

3What you get to decide, and how that grows

Power in a job isn't your title. It's what you're allowed to decide. Here's how it grows as you move up.

The choiceComing inWhere you are nowThe step above
DSAR Request FulfilmentUnder direct supervision, you'd execute specific steps like data collection or basic redaction, with all final outputs reviewed before sending.You'll independently manage standard DSARs from start to finish, including identity verification, data collation, redaction, and communication, escalating only complex or 'weaponized DSARs'.You'd oversee the entire DSAR programme, handling contentious requests, designing the workflows, and making final decisions on complex legal interpretations for disclosure.
Privacy Incident TriageYou'd report any potential incident to your supervisor immediately and assist with gathering initial information as directed.You'll perform initial assessment and classification of potential incidents ('is it a breach or an incident?'), log it, and initiate the first steps of the response plan, escalating if it's a reportable breach.You'd lead the incident response for significant breaches, making decisions on notification strategy, coordinating internal teams, and liaising with legal counsel.
RoPA Updates & MaintenanceYou'd update specific entries in the RoPA based on clear instructions, usually for minor changes or new, simple processing activities.You'll take ownership of ensuring the RoPA is accurate and complete for your assigned business areas, proactively identifying gaps and working with teams to get information, escalating only major discrepancies.You'd design the RoPA structure, define the update process for the whole organisation, and provide expert guidance on 'Article 30 Records' requirements to business leads.

4How you'll be judged

The scoreboard, honestly: the hard targets, how often each one is actually looked at, and the quiet human signals that never make it onto a dashboard.

DSAR Completion Time
The average number of calendar days it takes to close a standard Data Subject Access Request, from receipt to final delivery.
Target · < 25 days (against a 30-day legal limit)

In May, you completed 15 DSARs with an average turnaround of 22 days, well within our target and the legal deadline.

RoPA Accuracy & Timeliness
The percentage of new or updated data processing activities that are accurately recorded in the Records of Processing Activities (RoPA) within 5 working days of notification.
Target · >98% accuracy and 100% timeliness

During the Q2 audit, all 35 new processing activities identified were correctly entered into the RoPA with no factual errors and within the 5-day window.

Privacy Incident Triage Speed
The average time from initial notification of a potential privacy incident to its accurate classification (breach vs. non-breach) and initial logging.
Target · < 2 hours for 80% of incidents

A potential data leak was reported at 10:00 AM; you had it logged, classified as a non-reportable incident, and the initial steps taken by 11:30 AM.

Redaction Quality
The percentage of redacted documents that pass a peer review without any PII being accidentally disclosed or non-sensitive information being unnecessarily redacted.
Target · 100% pass rate

You redacted a 100-page document for a DSAR, and the Senior Assistant found no errors in the redactions, ensuring full compliance.

Process Adherence & Improvement Ideas
Consistently following established DSAR and RoPA procedures, but also spotting opportunities to make them better or more efficient.
  • You'll be able to show your work follows the checklist exactly, and you'll regularly suggest small tweaks to the process during team meetings, like a better way to collect evidence from IT.
Stakeholder Communication Clarity
Providing clear, concise, and jargon-free updates to internal teams (like HR or IT) when requesting information for DSARs or RoPA updates.
  • Internal teams will confirm they understand your requests without needing follow-up questions. They'll say things like, 'Sarah's emails are always really easy to act on.'
Discretion & Confidentiality
Handling highly sensitive personal data with the utmost care, ensuring it’s only accessed by those who absolutely need to see it, and never discussed outside of work.
  • You'll earn a reputation for being trustworthy. Colleagues won't hesitate to share sensitive information with you, knowing it's safe. There will be no instances of information being left unsecured or discussed inappropriately.

5Would you like it

The honest version. What people enjoy, and what grinds them down.

What people enjoy
Protecting Information

You'll feel a genuine sense of purpose knowing your work directly safeguards sensitive personal data from misuse or accidental disclosure. It's about being a digital guardian.

Completing a complex DSAR and knowing you've ensured the individual received their data securely and accurately, preventing any privacy risks.

Solving Puzzles (Compliance Edition)

Each DSAR or RoPA update is a mini-puzzle. You'll enjoy piecing together information from different systems, figuring out data flows, and making sure everything aligns perfectly with the rules.

Successfully mapping a new data processing activity across three different departments and systems, ensuring all 'Article 30 Records' are complete and correct.

Ensuring Fairness & Trust

You're motivated by the idea that individuals have rights over their data, and your role is to ensure those rights are upheld fairly and transparently. You're building trust, one compliant action at a time.

Responding to a data subject's query in a clear, empathetic way, even if their request is challenging, reinforcing their trust in our organisation's handling of their data.

What frustrates people
  • The 'Compliance Janitor' feeling: Constantly chasing other departments (Marketing, Sales, IT) for information they should have provided ages ago to complete a DPIA or update the RoPA.
  • Manual Redaction Hell: Spending hours manually blacking out names and details in a 500-page PDF because the business won't pay for proper e-discovery software.
  • The 'Department of No' perception: Being seen as a blocker who just says 'no' to exciting new projects, when you're actually trying to find a compliant way to say 'yes'.
  • Ambiguous Legal Advice: The law is often a series of 'it depends,' but the business demands a simple yes/no answer, leaving you to translate legal nuance into a concrete operational decision.
  • The Fire Drill: The sudden, urgent demand to drop everything to handle a DSAR from a CEO's acquaintance or a potential litigant, completely wrecking your planned work for the week.
What this role does not give you
  • High-level strategic decision-making (that comes later).
  • A fast-track to management (this is an individual contributor role).
  • A creative, unstructured environment (it's very process-driven).
  • Constant external client interaction (mostly internal teams and data subjects).

6Who you work with

You're on the front lines, ensuring we meet our legal obligations under GDPR and other privacy laws. Your work directly prevents data breaches from mishandled requests and ensures we can demonstrate compliance if a regulator comes knocking. Get it wrong, and we're looking at fines and a very public headache. Get it right, and you’re safeguarding our licence to operate.

Inside the business
  • Legal Team (for complex interpretations)
  • IT Security (for data identification and extraction)
  • HR Team (for employee DSARs)
  • Customer Service (for initial privacy enquiries)
  • Marketing Team (for data usage clarity in RoPA)
Outside the business
  • Data Subjects (individuals making requests)
  • Supervisory Authorities (e.g., ICO, for audits or complaints)
  • External Auditors (occasionally, for compliance checks)

7What you need before you start

Not a wish list. The things you would be expected to already have.

  • At least 2 years of experience in a compliance, legal support, or administrative role where handling sensitive information and following strict procedures was key.
  • Proven ability to work independently on defined tasks and manage multiple priorities under deadlines.
  • A strong grasp of Microsoft Office Suite, especially Excel, for data organisation and basic reporting.
  • Demonstrable experience with a ticketing system or workflow management tool (e.g., Jira, ServiceNow) for tracking requests.
  • A foundational understanding of data protection principles (like those in GDPR), even if not in a dedicated privacy role.

8What to practise next

Where the job is going, and what to do about it starting this week.

Advanced Privacy Platform Configuration

Our privacy management platforms (like OneTrust) are becoming more sophisticated. Being able to configure workflows and build basic assessment templates yourself, rather than relying on IT, will make you much more efficient and valuable.

Workflow Automation Logic · Assessment Template Design · Reporting & Dashboard Customisation · Integration Basics

  • This week: Explore all the settings and admin panels in OneTrust (if you have access) to see what's possible.
  • This month: Complete any vendor-provided training modules on advanced configuration for our privacy platform.
  • Month 2: Work with your Senior Assistant to build one small, automated workflow for a repetitive task.
  • Month 3: Try to customise a basic report in OneTrust that isn't currently available.

Quick win: Ask your Senior Assistant if you can take on configuring a minor update to an existing workflow in OneTrust. Get your hands dirty with the admin side of things.

9Staying current once you are in

What people here do to keep up
  • Regularly attending webinars and online courses from the ICO (Information Commissioner's Office) or IAPP to stay current with regulatory guidance.
  • Participating in internal training sessions on new systems or privacy-related policies.
  • Reading industry publications and privacy blogs to keep abreast of emerging trends and best practices.
  • Engaging in peer-to-peer learning within the team, sharing insights and challenging assumptions.

10How the AI economy is changing work like this

Before we ask anything of you, here's what we can already say about AI and work of this kind:

The new skill this role is being asked for: Proactive Risk Identification

Regulators are increasingly expecting organisations to not just react to problems, but to proactively identify and mitigate risks. This means moving beyond just processing requests to spotting potential issues before they become problems.

We'll only ever tell you what we can actually back up. No hype, no scare tactics.

Your PlanIllustration

Built for Data Protection Assistant

6 units that map to this job, from the qualifications that cover it.

  1. Data protection in public serviceCity and Guilds of London Institute · covers 4 of 11 standardsLevel 3
  2. Data ProtectionOpen Awards · covers 3 of 11 standardsLevel 3
  3. The management of information complianceDefence Awarding Organisation · covers 2 of 11 standardsLevel 4
  4. EU GDPR and Data SecurityQualifi Ltd · covers 2 of 11 standardsLevel 3
  5. Handle information and intelligence that can support law enforcementProQual Awarding Body · covers 1 of 11 standardsLevel 3
  6. Manage Information Management ComplianceDefence Awarding Organisation · covers 1 of 11 standardsLevel 4
These are the real units behind this job, in the order they rank for it. Nothing here is marked done, because this plan has not been started by anyone yet. Yours would fill in as you go.

The rising capability

Zavmo analysis

What's rising in its place

This is where the work is heading, and the higher pay with it. Get fluent here and the shift stops being a threat and starts being your edge.

Proactive Risk Identification

Regulators are increasingly expecting organisations to not just react to problems, but to proactively identify and mitigate risks. This means moving beyond just processing requests to spotting potential issues before they become problems.

  • Horizon Scanning (Privacy)
  • Privacy by Default in Practice
  • Data Lifecycle Management
  • Vendor Risk Assessment (Privacy Focus)

What you’ll use

Skills this role draws on

Technical

  • DSAR/Subject Rights Request Fulfilment
  • Records of Processing Activities (RoPA) Management
  • Data Protection Impact Assessment (DPIA) Support
  • Incident Response Triage & Coordination
  • Privacy by Design Application
  • Regulatory Interpretation & Application (Basic)

The pathway

How you actually get there, here

How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.

  1. 1

    Legal Administrator / Paralegal

    2-4 years

    Skills to master

    • Document management, legal research (basic), confidentiality, attention to detail, administrative process adherence.

    You're ready to move on when

    • You're the go-to person for organising sensitive legal files.
    • You've handled confidential client information without a hitch.
    • You're comfortable with legal jargon and can follow complex instructions accurately.
  2. 2

    Compliance Support Officer

    2-3 years

    Skills to master

    • Regulatory adherence, policy interpretation, incident logging, stakeholder communication, process execution.

    You're ready to move on when

    • You've helped ensure the business meets specific regulatory requirements.
    • You're good at explaining rules to colleagues in a clear way.
    • You've been involved in logging or triaging compliance-related issues.
  3. 3

    Administrative Assistant (with sensitive data exposure)

    3-5 years

    Skills to master

    • Advanced organisational skills, discretion, data handling, software proficiency (Excel, SharePoint), problem-solving.

    You're ready to move on when

    • You've routinely handled HR records, financial data, or other sensitive information.
    • You're known for your meticulous record-keeping and attention to detail.
    • You're proactive in identifying ways to improve administrative processes.

11Where this role leads

The long view:Your journey in data protection starts here, but it certainly doesn't end here. We're committed to providing the opportunities and support for you to grow into these advanced roles, whether you want to lead people or become a recognised subject matter expert.

Pay & demand

Pay and demand for this role will appear here, each figure traced to a named authoritative source (e.g. the ONS Annual Survey of Hours and Earnings, under the Open Government Licence). We don’t show numbers we can’t attribute.

The ten Future Fluencies

Zavmo analysis

The credential is what you can do today. These are what keep you valuable.

A qualification proves you can do the job as it's defined today. These ten are what decide whether you're still the obvious person for it in five years. They're the capabilities employers are now writing into senior roles faster than people are learning them. Zavmo weaves them through whatever you study, so you come out with both: the credential and the fluency.

The highlighted ones are the Fluencies your role leans on hardest, from how Data Protection Assistant is actually changing. In about two minutes, the free confidence check asks where you stand on each of the ten. That's the whole check, and it's what makes the plan yours rather than generic.

Where it leads

Roles this leads to

12The team that's yours

No two people are taught the same way. This is one-to-one, not one-to-many.

Zavmo is a hyper-personalised AI learning platform. Twelve virtual tutors, each with a different way of teaching, and one orchestration agent that picks the right one for the moment. So every single lesson is shaped around you, your role, and the way you learn. Not a course everyone sits through. A conversation built for you, and no one else.

…and nine more, matched to you after your first chat. Meet all twelve

Start free and meet yours

13What it feels like

A conversation, not a course

Because your tutor knows your role, your projects and your last session, learning sounds like this. And it's different for every single person:

Data protection in public serviceLevel 3

Applied to your work in Data Protection Assistant

This unit aims to enable learners to retrieve, use, store, and dispose of public service data in compliance with legal and organisational data protection requirements.

How the thinking builds
  1. Remember
  2. Understand
  3. Apply
  4. Analyse
  5. Evaluate
  6. Create
An illustration of a Zavmo lesson, built from this role’s own route. The unit, its objective and every criterion above are the awarding body’s own words, not an example.

One to one, not one to many

No two people run this the same way

A course is written once and handed to everyone. This is assembled around you, and keeps changing as it learns you. Five things it reads, and what each one changes.

  1. Your actual work Every lesson is taught against a live piece of your own work, not a worked example from a textbook.
  2. What you already know The first conversation finds your starting point, so you skip what you can already do and spend the time on what you cannot.
  3. The conditions you learn under Not a learning-styles quiz. The evidence does not support those. The dimensions the research does back, read once and used to shape the plan.
  4. How far you got last time It picks up mid-thought. The tutor knows what you said, what you struggled with, and what it asked you to try.
  5. Which tutor suits the moment Twelve of them, each for a different kind of thinking. The one who walks you through a first idea is not the one who stress-tests it.

See how you learn, free. Eight questions, no sign-up. A directional taster; the diagnostic inside Zavmo goes deeper and keeps adapting.

DemonstrateIllustration

Evidenced on your work in Data Protection Assistant

You do not finish by watching something. You finish by showing it on the work you already do, against the measures this job is judged on.

  • DSAR Completion TimeThe average number of calendar days it takes to close a standard Data Subject Access Request, from receipt to final delivery.In May, you completed 15 DSARs with an average turnaround of 22 days, well within our target and the legal deadline.< 25 days (against a 30-day legal limit)
  • RoPA Accuracy & TimelinessThe percentage of new or updated data processing activities that are accurately recorded in the Records of Processing Activities (RoPA) within 5 working days of notification.During the Q2 audit, all 35 new processing activities identified were correctly entered into the RoPA with no factual errors and within the 5-day window.>98% accuracy and 100% timeliness
  • Privacy Incident Triage SpeedThe average time from initial notification of a potential privacy incident to its accurate classification (breach vs. non-breach) and initial logging.A potential data leak was reported at 10:00 AM; you had it logged, classified as a non-reportable incident, and the initial steps taken by 11:30 AM.< 2 hours for 80% of incidents
  • Redaction QualityThe percentage of redacted documents that pass a peer review without any PII being accidentally disclosed or non-sensitive information being unnecessarily redacted.You redacted a 100-page document for a DSAR, and the Senior Assistant found no errors in the redactions, ensuring full compliance.100% pass rate
These are this job's own measures, with its own targets. Nothing is marked evidenced, because nobody has started this yet. Yours would fill in from the work you bring.

Your passport

This isn't a certificate you file away. It's a passport to the life you're designing.

Every credit you earn and every fluency you build adds up: evidence where it counts, carried with you. Zavmo keeps the map: where you are, where you're heading, and the next step, at your pace, around your life. From Data Protection Assistant to Senior Data Protection Assistant, and whatever you decide comes after.

Level 3 · in progressAI Fluency→ Senior Data Protection Assistant→ your design
Where this takes you

Your journey in data protection starts here, but it certainly doesn't end here. We're committed to providing the opportunities and support for you to grow into these advanced roles, whether you want to lead people or become a recognised subject matter expert.

See Your Progress GrowIllustration
Data Protection Assistant
  • DSAR/Subject Rights Request Fulfilment
  • Records of Processing Activities (RoPA) Management
  • Data Protection Impact Assessment (DPIA) Support
  • Incident Response Triage & Coordination
  • Privacy by Design Application
  • Regulatory Interpretation & Application (Basic)
This is your Mind Palace on learn.zavmo.ai. Every skill above comes from this role's own record, not an example borrowed from another job. A node lights up when you evidence it, and what you build stays yours between jobs. That is the part a course cannot do.

14The detail, folded away

Everything else the record holds

The career branches in full, how AI is already showing up in the day-to-day, and the questions people ask about this job. Here when you want them, out of the way while you decide.

Where it leads next, rung by rung

Where it leads

The career path, and where it branches

Data Protection Assistant is a start, not a ceiling. Each step below asks for new skills and hands back more autonomy.

  1. Senior Data Protection Assistant

    3-5 years in current role

    Level 3

    • Leading DPIA workshops end-to-end.
    • Designing and optimising DSAR workflows.
    • Advanced regulatory interpretation and application (e.g., cross-border transfers).
    • Managing contentious DSARs and privacy complaints.
Working with AI on the job

Working with AI

Where AI is starting to help

Imagine cutting down on the tedious, repetitive parts of your day, freeing you up for more interesting and impactful work. That's not a pipe dream; it's what AI can do for you in Data Protection.

In Compliance_Quality_Health_Safety, AI isn't here to replace you. It's here to be your smart assistant, helping you sift through mountains of data, draft communications, and spot risks faster than ever before. For a Data Protection Assistant, this means less 'manual redaction hell' and more time focusing on critical analysis and problem-solving.

Automated PII Discovery & Redaction

Use AI tools within platforms like Microsoft Purview or Relativity to automatically scan documents for Personally Identifiable Information (PII) – names, addresses, ID numbers – and apply suggested redactions. This can turn a 5-hour manual task for a complex DSAR into a 1-hour review and approval process. You'll still be in control, but the heavy lifting is done for you.

Risk Pattern Analysis

Leverage AI to analyse our central RoPA (Records of Processing Activities) and DPIA repository. It can spot high-risk patterns that you'd likely miss manually, such as frequent transfers of sensitive data to high-risk vendors or processes that consistently rely on a weak legal basis. This helps you surface risks that are invisible when looking at records one by one, giving you a head start on mitigation.

Regulatory Intelligence Synthesis

Imagine asking an AI tool: 'What has the ICO's stance been on using legitimate interest for marketing in the last 12 months?' You can use specialised legal AI or a fine-tuned Large Language Model (LLM) to summarise new regulatory guidance, court rulings, and enforcement actions, saving you hours of legal research and helping you stay on top of changes.

First-Draft Communications

You can use AI to generate the initial draft of routine communications. Think holding responses to data subjects ('We have received your request...'), updates to privacy notices, or internal awareness articles. This ensures consistency, speeds up your workflow, and frees you up to focus on the more complex, nuanced parts of your role.

Common questions

Common questions

How do you become a Data Protection Assistant?

Common routes in include Legal Administrator / Paralegal (2-4 years), Compliance Support Officer (2-3 years) and Administrative Assistant (with sensitive data exposure) (3-5 years). Times vary with prior experience.

Where can a Data Protection Assistant progress to?

This role can lead on to Senior Data Protection Assistant (3-5 years in current role), depending on the skills you build.

What level is a Data Protection Assistant in the UK?

This role aligns to RQF Level 3 on the UK framework, a guide to the depth of qualification it maps to, not a hard entry bar.

What new skills matter most for a Data Protection Assistant?

Increasingly, Proactive Risk Identification. These are the areas where the higher-paid, future-proof work is heading.

The honest bit

You’ve started things before

Most of them were built for a room full of people who aren’t you. A cohort moves on whether or not your week allowed it, and by the third week the thing you’re behind on becomes the reason you stop opening it.

There’s no cohort here, and no timetable to fall behind. Before anything starts, Zavmo asks when you’re sharpest and how long you can realistically sit down for, then builds the sessions around those answers. A bad fortnight changes your pace. It doesn’t put you behind.

And you only pay once you start learning. Searching and planning are free, and you can cancel any time — so the cost of finding out is an afternoon, not a year.

What it costs

Less than one coaching session. Every month.

A single career-coaching hour costs more than a month of this, and it ends when the hour does. Zavmo doesn't. It's £70 a month, about £2.30 a day, for a companion that knows a Data Protection Assistant, works on the job you actually do, and keeps going at your pace rather than a timetable's.

  • Searching and planning stay free. You only pay when you start learning.
  • Your credits are yours. Regulated, and they don't vanish when a subscription ends.
  • Cancel any time and billing stops. No notice period, no minimum term.

Your path, personalised

You have the map. Walking it is the part we do together.

This route runs to 11 national skill standards. That is a real journey.

Zavmo shapes a learning experience as unique as you are. It fits how you learn, your pace and the work you already do. Every step stays benchmarked to recognised national standards. That’s the plan for becoming a Data Protection Assistant: personal to you, and it still counts. The first steps are free.

Independent research finds well-designed intelligent tutoring performs nearly as well as one-to-one human tutoring: VanLehn (2011), Educational Psychologist.

A private tutor in the UK averages £35–40 an hour . Zavmo is £70/month.

A real plan on learn.zavmo.ai: Ofqual-regulated units, credits, and a three-month run at your own pace.
Start free No commitment. See your first steps free.

15Where to go from here

Other roles at Level 3

Same depth of qualification, different job. Useful if the work appeals but this particular role does not.

Other roles in Compliance Quality Health Safety

Stay in the field you know and move sideways rather than up.

If you leave this industry

The skills you build here are highly transferable. Data protection is critical in every industry, so you could move into finance, tech, healthcare, or retail. The core principles remain, even if the specific regulations change. Your expertise will always be in demand.

Not sure this is the right direction?

Work out what you actually want from work first, then come back and see which roles fit it. Takes about ten minutes.

This role profile is © 2026Growth Engineering Technologies Ltd. Built from UK occupational standards and regulated qualification data, and written for Zavmo.

You're not behind. You're right on time. The shift is only just beginning. Your role won't look the same in two years. Be the one who leads the change, not the one it happens to. Build my plan, free Here's the first ten minutes: a 2-minute confidence check → your personalised roadmap → meet the tutors matched to you. No card, cancel any time. No card. Build your plan, see your roadmap and meet the twelve tutors matched to you. All free. When you're ready to start learning, it's £70 a month, billed monthly. Cancel any time and billing stops.