Job Summary
The post holder will be Information Governance Manager and the Deputy Data Protection Officer for the locality.
They will be a subject matter expert, and have professional experience in Data Protection Law, Common Law Duty of Confidentiality, Records Management, and the Subject Access Requests. They will be an advisor on these matters to the Senior Information Risk Owner (SIRO), Caldicott Guardian, Senior Managers and GP Practices.
They will work collaboratively with the wider Information Governance Team to ensure NHS GM achieves compliance with the Data Security and Protection Toolkit (DSPT) and legislative Acts.
Provide specialist knowledge and guidance in relation to IG matters, and lead on designated Data, Security and Protection (DSP) projects.
The postholder will provide an IG support service to the GP Practices within their locality and depending upon local arrangements may act as their named Data Protection Officer.
Main duties of the job
The Locality IG Manager will work closely with the NHS GM SIRO, IG Service Delivery Lead and IG Policy and Compliance Manager to ensure compliance with all relevant data protection legislation and provide regular assurance to the appropriate governance groups.
As the Deputy Data Protection Officer for the locality, you will have the autonomy to advise on IG matters within your area and you must be able to operate independently with minimal supervision and will have the authority to communicate directly with the Locality Partnership Board, bypassing line management if required, to raise any concerns.
The post holder will be IG Manager and Deputy DPO for the locality, but they will be required to work closely with other IG Managers to provide cover and lead on specific projects.
About Us
Required to build effective relationships and work collaboratively with a wide range of Senior Managers, Clinicians and other care professionals working across multiple organisations on IG matters such as the implementation of highly complex data sharing initiatives.
As the subject matter expert, you will provide IG advice and support to staff at all levels within NHS GM and GP Practices and how it applies to their roles.
Communicate highly complex, sensitive, and often contentious information in areas such as data protection law, common law duty of confidentiality, subject access rights, records management and freedom of information to staff, patients, and the public, including the ability to present to large groups.
Represent NHS GM at local, regional, and national IG-related meetings.
Key working relationships
* Senior Information Risk Owner
* Caldicott Guardian
* Deputy Director of Data and Analytics (Place and Data Governance)
* Information Governance Service Delivery Lead
* Digital and IT Leads
* GPs and Senior Managers
* GP Practice Managers
* Greater Manchester Information Governance Group
* Third Party System Suppliers
Date posted
12 February 2025
Pay scheme
Agenda for change
Band
Band 7
Salary
£46,148 to £52,809 a year per annum
Contract
Permanent
Working pattern
Full-time
Reference number
896-STR-1204-A
Job locations
Tootal Buildings
Manchester
M1 6EU
Job Description
Job responsibilities
Identify, manage, resolve or where necessary escalate IG risks and issues using specialist skills and knowledge to ensure that the appropriate action is taken to mitigate them where possible.
Use Data Protection Impact Assessments to analyse, assess and interpret new service developments or data sharing initiatives to ensure they comply with the complex legislation, policy, and guidance.
Make judgements on highly complex and contentious issues, based upon your expert knowledge, where expert opinion may differ or be conflicting. For example, providing advice and responding to complex Subject Access Requests.
Postholder will be responsible for developing, managing and delivering the locality IG work plan and where applicable the GP Data Protection Officer Service.
In addition, you will work closely with the other IG Team Members to contribute to the development of NHS GM IG work plan including the submission of the organisations annual Data Security Protection Toolkit (DSPT).
Person Specification
Qualifications Essential
* Educated to Masters degree level or equivalent level of relevant professional experience in Information Governance
Desirable
* GDPR Practitioner
Knowledge Essential
* In depth specialist knowledge of Data Protection Law, Common Law Duty of Confidentiality, Records Management, and Subject Access Requests
Disclosure and Barring Service Check
This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.
Employer details
Employer name
NHS Greater Manchester Integrated Care
Address
Tootal Buildings
Manchester
M1 6EU
Employer's website
NHS Greater Manchester Integrated Care #J-18808-Ljbffr