Senior Data Protection Officer

**Senior Data Protection - Outside IR35**

**Contract Term: End of May 24**

**Contracting Authority: Ministry of Justice (MoJ)**

**Location: Remote/Hybrid - London**

***Please note this role is on a part time basis**:
The Ministry of Justice (MoJ) priorities include improving public safety and reducing reoffending by reforming prisons, probation and youth justice, and building a justice system which makes access to justice swifter and more certain for all citizens whatever their background. Project professionals in the MoJ help to improve the government’s ability to protect the public and reduce reoffending, and to provide a more effective, transparent and responsive criminal justice system for victims and the public.

**As a Senior Data protection officer your main responsibilities will be**:

- 1. Training Expertise:

- Implement comprehensive GDPR training programs for all staff, covering fundamental principles and practices.
- Develop specialized GDPR training modules tailored for process owners, ensuring a nuanced understanding of their responsibilities in data protection compliance.
- 2. Records of Processing Activities (RoPA) Management:

- Identify and assign processing activity owners for all relevant data processing functions.
- Establish, maintain, and regularly update Records of Processing Activities (RoPA) in collaboration with process owners, providing a transparent overview of data processing procedures.
- Populate and manage retention schedules to ensure compliance with data protection laws.
- 3. Lawful Basis and Data Protection Principles:

- Proficiently identify and document Article 6, Article 9, and Article 10 bases for all processing activities.
- Conduct regular assessments to verify processes align with GDPR principles and promptly identify and address any non-compliance through effective remediation activities.
- 4. Data Protection Impact Assessment (DPIA) Management:

- Provide and manage DPIA templates for systematic evaluation of processing activities.
- Screen all relevant activities to determine the necessity for DPIAs, ensuring thorough and consistent assessments are conducted.
- Data Breach Management and Reporting:

- Identify, review, and amend data breach management processes to align with GDPR requirements, emphasizing swift and effective response measures.
- Implement a robust reporting system for timely and accurate communication of data breaches to regulatory authorities and stakeholders.
- Third-Party Data Transfers Oversight:

- Identify sub-processors involved in data processing and obtain confirmation of processing agreements.
- Ensure appropriate transfer mechanisms are in place for data transfers, aligning with regulatory requirements.
- Identify and assess high-risk data processing agreements, facilitating necessary reviews and ensuring Data Processing Agreements (DPAs) are in place for relevant contracts.
- 7. Policy, Procedure, and Control Implementation:

- Implement and maintain a comprehensive set of policies, procedures, and controls to guarantee full compliance with data protection laws.
- Regularly update documentation to reflect changes in regulations, fostering a dynamic and responsive compliance framework.

***

**Disability confident**

**We will be in touch to discuss your suitability and arrange your Guaranteed Interview.**

**Should you require reasonable adjustments at any point during the recruitment process or if there is a more accessible way for us to communicate, please do let me know**
**.**
- Please be aware that this role can only be worked within the UK and not Overseas._