Job summary The One Devon EPR Programme Information Governance Lead is a professional manager responsible for leading on all information governance activity associated with the design, testing, implementation and adoption of the shared Epic system across the Royal Devon University Healthcare NHSFT (RDUH), University Hospitals Plymouth NHST (UHP) and Torbay and South Devon NHSFT (TSD), working alongside the three Trust Data Protection Officers (DPOs) and other colleagues to ensure that the One Devon EPR Programme takes appropriate actions to enable the Trusts to continue to meet their statutory obligations with regards Information Governance and Data Protection. As the programme's IG subject matter expert, the post-holder will interpret National policy and guidance and will lead on the development and / or modification of IG related programme collateral including Data Privacy Impact Assessment documents, Data Sharing / Data Processing agreements and Data Security & Protection Toolkits (DSPTs). The post-holder will lead on the mitigation and oversee the management of data risks associated with the implementation of the Epic EPR across all three Trusts. Preference will be given to internal Trust staff, as well as 'Priority' and 'At Risk' status including NHS At Risk staff throughout Devon who are able to display recent relevant experience as dictated by the Person Specification. Main duties of the job 1. Overall line management of any additional Information Governance resources employed by the One Devon EPR Programme, ensuring efficient, quality driven, service delivery and performance. 2. Promotes the development of staff at all levels through appraisal and by encouraging participation in opportunities to attend/complete courses, to mentor/be mentored and network within the Trust, regionally and nationally. 3. To support the three Trusts on the strategic direction of Information Governance, particularly as it relates to the implementation and adoption of the One Devon EPR. 4. Manages the Information Governance budget (as per delegated authority) and is responsible for the management of all staffing, budgetary and all other resources, using sound financial management skills to keep within budget and within predefined control totals. 5. To undertake other duties as required by the One Devon Programme SRO. About us We are a people business - where every member of staff matters and can make a difference. Patients are at the heart of everything we do. Joining University Hospitals Plymouth NHS Trust means becoming part of a team of dedicated staff, who are committed to leading the way through innovation, clinical excellence and great customer care. The Trust has great opportunities for career development in a highly progressive working environment. We offer all of this in a vibrant, modern city with a historic reputation for adventure. PLEASE NOTE THAT ALL COMMUNICATION WILL BE ELECTRONIC, PLEASE CHECK YOUR EMAIL ACCOUNT REGULARLY. If you have any issues with applying online and need additional support including reasonable adjustments with the application process please contact the recruitment team on 01752 432100. We recognise that work life balance is important for our colleagues and so we invite requests from applicants around less than full time/flexible working for our advertised roles. Please contact the recruiting manager to discuss this prior to your application submission. We commit to giving this full consideration in each case. We encourage people from diverse backgrounds to apply for our roles, as diversity strengthens our teams. It is sometimes necessary to close vacancies before the closing date. If you have not heard from us within 4 weeks of the closing date, please assume that you have not been shortlisted. Date posted 22 January 2025 Pay scheme Agenda for change Band Band 8a Salary £53,755 to £60,504 a year Per annum Contract Fixed term Duration 18 months Working pattern Full-time Reference number 216-YM-A6947004 Job locations Derriford Plymouth PL6 8BX Job description Job responsibilities 1. The appointment of a Data Protection Officer (DPO) is mandatory for all public authorities under the General Data Protection Regulation (GDPR). This post holder will provide support, in relation to the implementation and adoption of the One Devon EPR, to enable the three Trust DPOs to continue to fulfil that obligation. To maintain expert knowledge of data protection law and practices and how they apply to the implementation and adoption of the One Devon EPR, providing support, advice, and assurance of compliance across the Trust. 3. To be the first point of contact within the One Devon EPR Programme for all data protection matters. To ensure that data protection is addressed by default and in the design of the One Devon EPR (including associated third-party systems in addition to the Epic EPR) and information processes. To support the Trust DPOs in relation to any contact directly by data subjects which relate to the One Devon EPR. The One Devon EPR Programme IG Lead will ensure that appropriate confidentiality is maintained in the performance of their tasks. In performing their tasks, the One Devon EPR Programme IG Lead must ensure that their responsibilities are not influenced in any way and should a potential conflict of interest arise report this to the highest management level. To update and / or develop and establish policies, procedures, and other measures to ensure compliance with the GDPR (as this relates to the implementation and adoption of the One Devon EPR), including but not limited to: - records of processing activities - data protection by design and default - data protection impact assessment - fair processing notices etc. 9. To monitor compliance with these measures and report to the Compliance Advisory Group as well as providing reports and updates as required to the One Devon EPR Programme Board and attending and reporting to Trust Information Governance and Assurance governance groups as required. Job description Job responsibilities 1. The appointment of a Data Protection Officer (DPO) is mandatory for all public authorities under the General Data Protection Regulation (GDPR). This post holder will provide support, in relation to the implementation and adoption of the One Devon EPR, to enable the three Trust DPOs to continue to fulfil that obligation. To maintain expert knowledge of data protection law and practices and how they apply to the implementation and adoption of the One Devon EPR, providing support, advice, and assurance of compliance across the Trust. 3. To be the first point of contact within the One Devon EPR Programme for all data protection matters. To ensure that data protection is addressed by default and in the design of the One Devon EPR (including associated third-party systems in addition to the Epic EPR) and information processes. To support the Trust DPOs in relation to any contact directly by data subjects which relate to the One Devon EPR. The One Devon EPR Programme IG Lead will ensure that appropriate confidentiality is maintained in the performance of their tasks. In performing their tasks, the One Devon EPR Programme IG Lead must ensure that their responsibilities are not influenced in any way and should a potential conflict of interest arise report this to the highest management level. To update and / or develop and establish policies, procedures, and other measures to ensure compliance with the GDPR (as this relates to the implementation and adoption of the One Devon EPR), including but not limited to: - records of processing activities - data protection by design and default - data protection impact assessment - fair processing notices etc. 9. To monitor compliance with these measures and report to the Compliance Advisory Group as well as providing reports and updates as required to the One Devon EPR Programme Board and attending and reporting to Trust Information Governance and Assurance governance groups as required. Person Specification Knowledge and Experience Essential An experienced Information Governance Professional Manager with extensive knowledge of the specialism of Data Protection and Freedom of Information gained from post graduate study, continuing professional development and from working in a large NHS organisation in a lead Information Governance role or EPR implementation. Proven knowledge of fast changing digital solutions used to process data in a large organisation and the impact on data subjects' rights. Demonstrable experience of leadership, line management, managing budgets and business planning. Role on regional or national IG committee/group taking active part in informing IG regional and national agenda such as the Strategic Information Governance Network. Extensive understanding of policy on Information Governance obtained through study, attending NHSE Transformation Directorate events and networking. Demonstrable experience of working with staff of all levels. Demonstrable experience of the delivery of complex training to both large and small groups of staff across a large and complex organisation using a variety of media. Qualifications Essential Professional Information Governance proven knowledge acquired through Masters level qualification or working towards. Further Professional qualifications in Information Governance in line with British Computing Society (BCS) Practitioner Qualifications in Data Protection and Freedom of Information legislation. Professional Management Qualification - Level 6 Root Cause Analysis (RCA) Qualification Person Specification Knowledge and Experience Essential An experienced Information Governance Professional Manager with extensive knowledge of the specialism of Data Protection and Freedom of Information gained from post graduate study, continuing professional development and from working in a large NHS organisation in a lead Information Governance role or EPR implementation. Proven knowledge of fast changing digital solutions used to process data in a large organisation and the impact on data subjects' rights. Demonstrable experience of leadership, line management, managing budgets and business planning. Role on regional or national IG committee/group taking active part in informing IG regional and national agenda such as the Strategic Information Governance Network. Extensive understanding of policy on Information Governance obtained through study, attending NHSE Transformation Directorate events and networking. Demonstrable experience of working with staff of all levels. Demonstrable experience of the delivery of complex training to both large and small groups of staff across a large and complex organisation using a variety of media. Qualifications Essential Professional Information Governance proven knowledge acquired through Masters level qualification or working towards. Further Professional qualifications in Information Governance in line with British Computing Society (BCS) Practitioner Qualifications in Data Protection and Freedom of Information legislation. Professional Management Qualification - Level 6 Root Cause Analysis (RCA) Qualification Disclosure and Barring Service Check This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions. Certificate of Sponsorship Applications from job seekers who require current Skilled worker sponsorship to work in the UK are welcome and will be considered alongside all other applications. For further information visit the UK Visas and Immigration website (Opens in a new tab). From 6 April 2017, skilled worker applicants, applying for entry clearance into the UK, have had to present a criminal record certificate from each country they have resided continuously or cumulatively for 12 months or more in the past 10 years. Adult dependants (over 18 years old) are also subject to this requirement. Guidance can be found here Criminal records checks for overseas applicants (Opens in a new tab). Additional information Disclosure and Barring Service Check This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions. Certificate of Sponsorship Applications from job seekers who require current Skilled worker sponsorship to work in the UK are welcome and will be considered alongside all other applications. For further information visit the UK Visas and Immigration website (Opens in a new tab). From 6 April 2017, skilled worker applicants, applying for entry clearance into the UK, have had to present a criminal record certificate from each country they have resided continuously or cumulatively for 12 months or more in the past 10 years. Adult dependants (over 18 years old) are also subject to this requirement. Guidance can be found here Criminal records checks for overseas applicants (Opens in a new tab). Employer details Employer name University Hospitals Plymouth NHS Trust Address Derriford Plymouth PL6 8BX Employer's website https://www.plymouthhospitals.nhs.uk/ (Opens in a new tab)