Deputy Data Protection Officer

**Details**:
**Reference number**:

- 419856

**Salary**:

- £42,382 - £45,920
- Important information about pay - it is expected that from 1 October 2025 the pay for this role will be £47,258. In addition once the role holder has completed their probationary period (usually 6 months) they will become eligible to receive a pay premium allowance of £3,544 per annum. This pay premium allowance is non contractual and non pensionable.
- A Civil Service Pension with an employer contribution of 28.97%

GBP

**Job grade**:

- Senior Executive Officer

**Contract type**:

- Permanent

**Business area**:

- CO - Infected Blood Compensation Authority (IBCA)

**Type of role**:

- Knowledge and Information Management

**Working pattern**:

- Full-time

**Number of jobs available**:

- 1

**Contents**:

- Location
- About the job
- Benefits
- Things you need to know

**Location**:

- Glasgow, Newcastle-upon-Tyne

**About the job**:
**Job summary**:
The Infected Blood Compensation Authority (IBCA) is a recently established organisation which has been set up to pay compensation to those who have been infected and affected by the infected blood scandal. The IBCA Data Governance team sits within the wider Data Directorate, and is staffed by leads for Data Protection, Knowledge and Information Management (KIM), and Information Rights and Disclosure.

This post reports to the Data Protection strand, which will enable IBCA to process personal data while assuring compliance with data protection legislation, and is led by IBCA’s Data Protection Officer.
- Please note that the mission of IBCA means that it is likely to be operational for a period of approximately 5 to 7 years. When IBCA’s work begins to wind down, IBCA employees will receive support and practical guidance to find a new role, whether in the Civil Service, another Arms Length Body (ALB), or an external employer. _

**Job description**:
As the Deputy DPO, you will support the Data Protection Officer to lead the data protection function within IBCA, as well as occasionally deputising in the performance of statutory data protection responsibilities.

The team functions will collaborate to provide effective data governance for IBCA, with an expectation that work will also flow between the strands as circumstances and business needs require.

This role requires you to be in either the Newcastle or Glasgow office at least 60% of your time, depending on which office you are based at.

**Responsibilities**
- Deputise for the Data Protection Officer in the performance of statutory functions, providing advice and guidance to the Data Governance team and across the organisation;
- Engage with operational teams and external stakeholders to deliver a data protection framework across the organisation and support its compliance with relevant legislation;
- Support the management of IBCAs data protection functions, including producing and maintaining clear, accessible, user-friendly procedures, processes, forms and guidance;
- Monitor compliance with the UK GDPR and other data protection laws, developing our data protection policies, processes and procedures, including managing internal data protection activities and conducting compliance reviews;
- Support statutory data protection requirements, including providing advice and assistance on data security incidents to support decision making decisions on breaches and whether to report them to the Information Commissioner’s Office (ICO);
- Participate in quality improvement activities and follow up actions of audit and investigation reports;
- Monitor and advise on the undertaking and completion of Data Protection Impact Assessments when new or alternative processing is proposed. Influence the development of systems and processes to adopt a privacy by design and default approach across the organisation to meet compliance with the strategic and organisational objectives;
- Supporting colleagues as required with compliance to organisational wide and statutory compliance regarding data protection legislation;
- Undertake reviews on behalf of the Data Protection Officer in respect of data protection concerns and to provide recommended actions;
- Analysing data gathered through audit controls and producing high quality reports;
- Develop data protection training programmes.

The post holder may also support other Data Governance leads with their responsibilities. These may include:

- Supporting with the implementation of DG policies;
- Creating effective communications on data governance matters;
- Monitoring performance against corporate and legal performance targets;
- Creating and maintaining collaborative tools to facilitate the sharing of knowledge;
- Being agile to business requirements, working across the different strands.
- The post holder will work closely with the other Data Governance leads, particularly Knowledge and Information Management, to embed consistent, compliant information governance controls across the organisati