Information Governance Manager and Data Protection Officer

The Information Governance Manager and Data Protection Officer will ensure the authority's compliance with information law including the UK GDPR and Freedom of Information Act and to provide an effective complaints procedure across all council services.

Key responsibilities will be to:

• Handle information rights requests, including requests for access to personal data and requests for erasure and deal with requests from external organisations for the disclosure of personal data held by the council.
• Carry out investigations into data breaches including making decisions as to the necessity to report breaches to the Information Commissioner's office. Make recommendations for procedural change and disciplinary action, as appropriate, depending on the impact of the breach.
• Ensure published privacy information is GDPR compliant and up to date and take responsibility for policy and procedure for all matters relating to Data Protection, Freedom of Information and Environmental Information Regulations.
• Provide guidance and advice to staff and Members on compliance with Data Protection legislation including the production of Data Protection Impact Assessments through the regular chairing of an Information Governance Working Board and submission of reports and updates to the Information Governance Board
• Provide guidance and advice to staff, managers and Members on compliance with the Freedom of Information Act and Environmental Information Regulations.