Data Protection

This post brings together the Information Governance Coordinate function (Information Governance Support Lead) and highly specialist knowledge and skills required to establish and maintain General Data Protection Regulation (GDPR) by supporting the Trusts Data Protection Officer (DPO). The post will act as a central and reporting point to the Data Protection Officer, Information Governance Manager & Deputy SIRO and the Information Quality & Governance sub-committee.

From time to time you may be handling Subject Access Requests from staff or Government / Public bodies.

To be successful in this role, the post holder should have an in-depth knowledge of GDPR and local data protection laws and be familiar with the NHS and the nature of its data processing activities.

The Information Governance Support Lead role will assist Data Protection Officer and Information Governance Manager in managing the Information Governance across the Trust and will be deputised as the Information Governance Manager when required.

Our Team is tight knit and work well together. This vacancy would suit a newly qualified Data Protection professional to join the Information Governance Department. You will need to be highly motivated in aiding the delivery of the information governance service to staff and service users. The post holder will be supported by the Data Protection Officer, Information Governance Manager & Deputy SIRO.

Knowledge of national and European data protection laws and practices and an in depth understanding of the GDPR
- Managing Freedom of Information requests received by the Trust in accordance with corporate and legislative requirement; including logging, reviewing and collecting information and providing final responses to requestors
- Demonstrable ability to fulfil his or her tasks with excellent administration skills and attention to detail. One will be required to be a minute taker at the Information Quality & Sub-committee.
- Sufficient understanding of the processing operations carried out in the NHS, as well as the information systems and data security and data protection needs of the Trust
- To execute the Trust work plan and departmental actions in place for the Trust to maintain compliance with GDPR
- To collate evidence for demonstrating compliance with the NHS Data Security and Protection Toolkit online self-assessment.
- To provide advice to the Trust and its employees on compliance obligations
- To advise and undertake data protection impact assessments and to monitor their performance
- To provide support, advice and assurance of compliance to the Information Quality & Governance sub-committee and Trust’s Executive Directors when required.

To support programmes of work from inception to ensure that data protection is addressed by default and in the design of new systems and information processes
- To ensure that the teams within departments are appropriately trained and maintain their expertise and draft documentation / templates and processes in line with legislation
- The Support Lead will ensure that appropriate confidentiality is maintained in the performance of his or her tasks and to be the first point of contact within the Trust internally for all data protection matters. In performing his or her tasks as the Support Lead must ensure that their responsibilities are not influenced in any way, and should a potential conflict of interest arise to report this to the Data Protection Officer, Information Governance Manager & Deputy SIRO.
- To develop or advise senior management on the development and establishment of policies, procedures and other measures to ensure compliance with GDPR, including but not limited to:

- Records of processing activities
- Data protection by design and default
- Data protection impact assessment
- Fair processing
- To develop and maintain compliance reporting for GDPR to be prepared for the Information Quality & Governance sub-committee
- To support programmes and initiatives that involve the development of new or innovative information processes on the need for data protection impact assessment.
- To deliver or support Data Quality audits across the Trust to be prepared for assurance checks and perform spot check audits of high risk systems. To develop / maintain annual due diligent audit of all supplier contracts
- Provision of specialist advise to the Trust on compliance obligations
- Provision of advice and maintain risk logs for projects and business change initiatives on when data protection impact assessment is required
- To take account of the risks associated with processing in the performance of his or her tasks
- Development of materials to support staff in conducting data protection impact assessment, and implanting knowledge
- Maintaining and monitoring the Trusts information and data flow mapping