Data Protection Officer

Overview

As the Trust’s statutory DPO, you will provide independent expert guidance on data protection, privacy and information governance, ensuring UK GDPR compliance. You will work with the Board, SIRO and Caldicott Guardian to shape the strategic IG agenda and support system-wide data protection initiatives. This role offers scope to influence data protection practice across the Trust and with Integrated Care System partners. You will lead a busy IG and Records Team and act as the primary liaison with regulators and data subjects. Your work will enable safe, lawful data use and strong governance across digital and cybersecurity domains.

Pay / Benefits

• Early access to Psychological Therapies and Physiotherapy
• Competitive annual leave allowance
• Car leasing scheme
• NHS pension scheme
• Free eye tests
• Salary sacrifice scheme discounts

Responsibilities

• Act as statutory DPO with oversight of UK GDPR compliance and related legislation
• Provide independent advice on data protection risks to the Board, SIRO and Caldicott Guardian
• Serve as primary contact for ICO and data subjects
• Lead development and assurance of Information Governance policies, procedures and strategies
• Oversee Data Security and Protection Toolkit delivery and related compliance activities
• Advise on DPIAs, information sharing agreements, and contracts
• Lead or support investigations into data breaches and IG incidents
• Provide assurance on data protection aspects of cybersecurity and digital initiatives
• Produce reports for Board and governance committees
• Line manage the Information Governance and Records Management team

Key requirements

• In-depth knowledge of data security, information governance and information security, preferably NHS/public sector
• Experience delivering the Data Security and Protection Toolkit
• Excellent communication, able to present to senior audiences

• Strong influencing at senior level
• Clear communication of complex concepts
• Motivation and leadership of a team
• Data Protection Act and GDPR, Records of Processing, Information Asset Management
• Project management methodologies
• Information Governance frameworks and DPIAs

…