Assistant Data Protection Officer

Reporting directly to the Records of Processing Manager in the Data Protection Office, the Data Protection Officer is responsible for providing of a data protection advisory service to the Trust. The post requires a highly motivated individual with excellent written and verbal communications skills who is capable of working both alone and as part of a small, but growing, dedicated team. The Data Protection advisory service encompasses providing detailed and complex written advice concerning:

- Management and Investigation of Data Security and Protection Incidents
- Data Sharing Arrangements and Data Processing Agreements with Third-Party Healthcare Organisations
- Assessment and advice on the evidence required for the NHS Digital Data Security and Protection Toolkit
- Advice on complex compliance issues with regards to the General Data Protection Regulation, Data Protection Act 2018, National Data Guardian Report, and wider policy and legislative framework
- Provision of administration support to the Data Security and Protection Committee
- Stakeholder engagement, including liaison with clinical staff, service management, the Information Commissioner’s Office, and the Trust Caldicott Guardian

At Imperial College Healthcare you can achieve extraordinary things with extraordinary people, working with leading clinicians pushing boundaries in patient care. Become part of a vibrant team living our values - expert, kind, collaborative and aspirational. You’ll get an experience like no other and will fast forward your career.

Benefits include career development, flexible working and wellbeing, staff recognition scheme. Make use of optional benefits including Cycle to work, car lease schemes, season ticket loan or membership options for onsite leisure facilities. We encourage staff to have the Covid vaccination to protect themselves, patients, other colleagues as well as the wider community. Please note it is an operational requirement to comply with infection prevention and control procedures within the Trust such as lateral flow testing, handwashing and the wearing of masks, according to the procedures in place at any time or location.

As part of our continued response to Covid19 we are still conducting the majority of our interviews virtually.

Data Protection Support
- Facilitate the process for the Trust’s annual submission of the Data Security and Protection Toolkit return under the guidance of the Data Protection Officer
- Act as a general source of specialist Data Protection advice and guidance to staff at all levels of the organisation and enter all enquiries in the DPO Call Management System with progress and advice given.
- The post-holder will provide administrative support including organising the IGCS, weekly Caldicott Review, Traffic Meetings, Weekly DPO Surgery and other ad hoc meetings, providing agendas, writing of minutes and maintaining action logs.
- Develop and present reports for divisional and other meetings.
- To develop the DSP Training content and work with key contacts in Human resources to ensure accessibility on the DPO Training platform. Provision of targeted GDPR Workshop and Action Planning workshops as required by relevant teams.
- To provide support and in some cases deputise for all aspects of DSP streams performed by the Data Protection Officer
- Work to identify the areas of risk and exposure associated with Data Protection and help develop actions and improvement plans and oversee their implementation

Data Protection Policies and Procedures
- To support the Data Protection Officer in the drafting of the Trust’s Data Protection, policies, procedures and guidance.
- Promotion of Good Practice through a variety of communications materials and medi

User Support
- Work closely with the Caldicott Guardian and Senior Information Risk Owner (SIRO) on any Confidentiality or Data Protection issues
- To develop service specific Information Sharing Protocols to support the over-arching Information Sharing Protocol. This will include internal protocols as well as those with other organisations.
- Advise the divisions on data flow mapping to ensure that the Trust’s data flows are captured, risk assessed and actions taken to mitigate threats to the organisations GDPR and legislation compliance
- To provide expert advice on the legality and ethics of information related decisions in relation to confidentiality
- To ensure that requests for information made by law enforcement agencies are scrutinise

User Interface
- Provision of forms for the collection of data to support Data Protection Impact Assessments (DPIA)s of proposed new systems, new processes and interoperability projects
- Advice on DPIA mitigations and the requirements on records of processing
- Answering both simple and complex queries in writing recorded on the data protection management system
- Collaboration with colleagues based in in the Trust and other third party health providers working with the Trust
- Pr