Data Protection Officer (Infected Blood Compensation Authority)

www.findapprenticeship.service.gov.uk - Jobboard; North East; On-site; GBP 40,000 - 60,000; Full time

Job summary

A government agency in the United Kingdom is seeking a Data Protection Officer to ensure compliance with UK data protection legislation, particularly in relation to sensitive personal data. The role involves implementing data protection strategies, leading assessments, and providing guidance on compliance issues. The ideal candidate will have strong expertise in data protection laws and effective communication skills to work with various stakeholders.

Qualifications

• Proven experience in data protection roles, specifically UK GDPR compliance.
• Strong understanding of data protection legislation and best practices.
• Experience in conducting Data Protection Impact Assessments.

Responsibilities

• Implement a data protection framework and ensure compliance.
• Develop and maintain data protection strategies and policies.
• Lead Data Protection Impact Assessments for new processing activities.
• Provide advice on data security incidents and compliance.
• Manage data protection functions and training programs.

Skills

Data protection compliance

Risk management

Privacy by design

Communication skills

Education

Relevant degree or certification in Data Protection or related field

Job description

The Infected Blood Compensation Authority is seeking a Data Protection Officer to ensure compliance with data protection legislation when processing personal data. IBCA is responsible for paying compensation to eligible applicants affected by the infected blood scandal, which involves processing sensitive evidence such as medical records and health data. The role also involves managing information flows between government departments and relevant bodies to support the application process.

IBCA is a newly established department, requiring robust data protection assurance as its operations develop. This position offers a unique opportunity to shape and implement a data protection function that supports a mission-focused team.

Main Responsibilities

• Engage with operational teams and external stakeholders to implement a data protection framework and ensure compliance with relevant legislation.
• Develop and maintain IBCA’s data protection strategy and policies.
• Lead on Data Protection Impact Assessments for new or modified processing activities, promoting privacy by design and default.
• Ensure compliance with UK GDPR and other data protection laws, including managing internal activities and conducting compliance reviews.
• Provide advice on data security incidents, support breach decision-making, and report breaches to the ICO as required.
• Advise on the lawfulness of using IBCA’s statutory powers.
• Ensure policies, processes, and digital tools comply with data protection standards.
• Determine lawful bases for processing and data controllership.
• Safeguard privacy issues related to IBCA’s use of personal data.
• Create and support data protection procedures and products.
• Manage the data protection functions, including developing user-friendly guidance and forms.
• Develop and deliver data protection training programs.
• Address other relevant data protection issues as they arise.

The post holder will work closely with other Data Governance leads, especially Knowledge and Information Management, to embed consistent information governance controls across IBCA.