DPO

Morson Edge are delighted to be supporting a leading Public Sector organisation to help recruit a DPO (Data Protection Officer) on a permanent basis. The DPO will provide advice and direction to ensure the highest standards of compliance with data protection laws and associated regulatory guidance are achieved.

The role holder will:

• Fulfil all statutory tasks as defined within Article 39 of the UK GDPR.
• Advise on emerging data protection risks including AI, automated decision making and evolving UK data protection reforms.
• Monitor organisational compliance with data protection legislation through audits and other available mechanisms including the ICO's Accountability Framework.
• Provide advice on data protection impact assessments and monitor the organisation's performance in carrying these out.
• Ensure there are effective measures in place for identifying and responding to personal data incidents, breaches and complaints.
• Provide leadership and direction about the clients' response in the event of a serious data breach.
• Respond to data protection complaints.
• Keep updated on changes to the legislative and regulatory landscape, including emerging laws and regulation of AI technologies, that will impact the client to ensure any changes are reflected in internal policies and training.
• Be the first point of contact for the Information Commissioner’s Office/Information Commission and for individuals whose data is processed.
• Manage the network local Data and Information Owners (DIOs).
• Ensure there are up to date data processing agreements in place with any third parties processing personal data on behalf of the client including appropriate contract terms with suppliers, and data sharing agreements with other data controllers.
• Maintain close liaison and oversight of the work of the BSB Data Protection Team.
• Lead and co-ordinate handling of Subject Access Requests and the exercise of other Data Subjects' rights and create appropriate channels of communication to allow stakeholders to exercise their rights (including webpages, emails etc).
• Liaise with the Head of Information Management and the Data Protection Team on BSB Subject Access Requests and the exercise of other Data Subjects' Rights, as necessary.
• Maintain framework of controls:

• Maintain the Record of Processing Activities.
• Maintain regular review of the Accountability Tracker to assess overall compliance.
• Maintain up to date internal policies, procedures, and training for staff to handle personal data securely and appropriately.
• With the IT Team, PMO, IM Team and CSO, ensure all IT systems are UK GDPR compliant, and that new suppliers complete required checks of their systems for UK GDPR compliance and information security before they are introduced.
• Help ensure the requirements of the Working Abroad Policy are met, along with other members of the Working Abroad Team, to ensure GCB's IT systems' security is maintained when staff work abroad.
• Maintain a scheme to monitor internal compliance and ensure identified risks are shared with business teams and senior management.
• Maintain a scheme of reporting to senior management and governance groups, including but not limited to Audit Committee and GRA, to satisfy best practice, other policy or legislative requirements.
• Maintain a scheme for reporting data breaches to senior management and the ICO in line with UK GDPR, other legislation and businesses own policy requirements.

Please make contact and send your CV to discuss the role.