Job overview
Working for the Information Governance Team the successful candidate will work (part time - 30 hours) with a small team of staff facilitating access to personal information (patient information and staff information) following strict legal deadlines.
You will need knowledge of the General Data Protection Regulation (GDPR) and Data Protection Act 2018 with regard to Subject Access, either gained through practical application of the law or formal training. Your knowledge of Subject Access and its practical application will be tested at interview.
In addition to this, the postholder must have an understanding of the confidentiality issues associated with handling personal, confidential and special information and be able to maintain confidentiality. The ability to work under the pressure of constant deadlines while still maintaining accuracy and attention to detail is essential.
You will be educated to NVQ level 3, Experience of processing requests for personal information is desirable.
Main duties of the job
The successful postholder will ensure that access to personal information of living and deceased individuals is processed in a legal, timely and consistent way according to the General Data Protection Regulation (GDPR), Data Protection Act 2018, Access to Health Records Act 1990 and common law duty of confidentiality.
You will respond to queries from patients, staff and external organisations with regard to access to personal information using your knowledge of the Data Protection Act 2018, GDPR and Access to Health Records Act 1990. Escalate complex queries to supervisor or senior manager.
In addition to this, the postholder will answer service user queries on access to their health records. Contact is usually by telephone or letter but a very limited amount of face-to-face contact may be required, for example if an individual wants to personally collect copies of their records. Sometimes you will have to talk with individuals who are upset or angry. You will have to be able to cope with these individuals in an assertive but empathetic manner.
Detailed job description and main responsibilities
Please see attached the job description and person specification which outlines the main duties and responsibilities of the role.
You must have the Right to Work in the UK in order to be successfully appointed to this role. Please note, this role does not meet the required eligibility criteria for sponsorship under the Skilled Worker visa and therefore the Trust is unable to offer sponsorship for this particular role.
This job advert may close early if a high volume of applications have been received. If interested, please apply for this post as soon as possible.
Person specification
Skills
Essential
- Ability to provide information on complex non-routine queries
- Excellent communication skills; written and verbal
- Ability to follow policies and procedures
- Ability to use Microsoft Office software; Word, Excel, Outlook and PowerPoint
- Ability to maintain confidentiality
Desirable
- Ability to learn and use a range of bespoke IT systems
Knowledge
Essential
- Knowledge and understanding of the Data Protection Act 2018 and General Data Protection Regulation;
- Knowledge and understanding of the common law duty of confidentiality and NHS code of Practice on Confidentiality
- Knowledge and understanding of information governance topics including: Records Management, Information Security, Confidentiality and Data Quality
Desirable
- Knowledge of the Access to Health Records Act 1990;
- Knowledge of the Freedom of Information Act and how it relates to the disclosure of personal information
Experience
Essential
- Experience of handling sensitive, confidential, personal information
- Providing information to members of the public
- Providing information to all levels of staff
- Working within a large, complex organisation
- Experience of clinical systems such as patient administration systems, outpatient clinic systems
Desirable
- Interrogating bespoke IT systems;
- Working with confidential patient information;
Qualifications
Essential
- Educated to NVQ level 3
- ITQ/ECDL qualification or equivalent
Desirable
- ISEB Foundation Certificate in Data Protection
WhatsApp job alerts
Get instant WhatsApp alerts for Band 3 Medical Secretary roles in Darlington
Create your Job Clerk account first. We'll collect your alert preferences during onboarding and help you turn on WhatsApp notifications for matching healthcare roles.
Applying for this NHS job
This advert is for Data Protection Assistant with Tees, Esk and Wear Valleys NHS Foundation Trust in Darlington, North East and Yorkshire, England. It is listed as a Band 3 Administrative and IT role. The advertised salary is £25,760 - £27,476 per annum. The contract type is Permanent. The application deadline is 03 Aug 2026.
Before you apply, compare the job description with the person specification and mirror the employer's essential criteria in your supporting information. Use the vacancy title, employer, location, salary, contract type, closing date and posted date (20 Jul 2026) to decide whether this role fits your current NHS job search. If the employer can close applications early, prepare the application before the stated deadline rather than waiting for the final day.
For more context, review related Job Clerk pages for the same profession, band or location where they exist, then use the application-support guides to tailor your statement and prepare for interview.