Information Governance Officer

Job overview

The role of the Information Governance (IG) Officer is to assist with the entire IG work programme, and to ensure compliance with the requirements of the Data Protection and Security Toolkit and other national standards, guidance and legislation.

Main duties of the job

The post holder will be the first point of contact for providing advice and support to all staff on IG issues. The post holder will work with all staff groups to raise awareness of IG throughout the organisation, by coordinating and delivering training and ensuring that all staff are aware of their responsibilities and adhere to/comply with the relevant policies.

The post holder will use their specialist knowledge to provide advice and training around IG, including FOI, DP, information rights and confidentiality. They will make recommendations for the provision of clear and accessible guidance to all staff groups, to ensure the organisation meets both its statutory and legal obligations.

The post holder will take a solution-focused approach to IG, encouraging a culture of identifying opportunities and designing systems and services in a way that complies with Data Protection legislation, ensuring that the implementation of the service is achieved in a practical and supportive way and that IG is not perceived as an obstacle or blocker.

Detailed job description and main responsibilities

• Act as the first point of contact for IG and Information enquiries - some of which will be of a confidential nature - referring enquirers onward where appropriate.
• Monitor and respond to queries that come through the team's shared mailboxes.
• Provide guidance and advice to Trust teams and senior management on a wide range of complex IG issues and escalate as required to enhance service delivery and patient care.
• Assist with and co-ordinate the production, collation and systematic returns and recording of evidence to support compliance with the Data Security & Protection Toolkit.
• Triage and investigate IG incidents reported on InPhase and escalate to IG Managers and DPO where appropriate.
• Promote and raise staff awareness of IG by working with other team members to plan, organise and deliver training programmes to staff at all levels of the organisation. This may include staff induction, mandatory training – including face-to-face, e-learning, refresher and ad-hoc training.
• Ensure policies, procedures and learning materials are updated and maintained.
• Plan, coordinate and conduct IG audits (spot checks) of clinical and corporate departments for all Trust sites and provide written feedback detailing any issues found and appropriate actions to the relevant Service Managers.
• Provide support and advice to the FOI and SARs teams and staff as required.
• Co-ordinate IG risk assessments and reviews, including Data Protection Impact Assessments (DPIAs) for new and existing systems/processes involving processing of personal data; organise meetings as appropriate.
• Support with the collection and collation of information for Data Flow mapping and Asset Registers, including where appropriate offering training and support.
• Attend meetings on behalf of the IG team as required.
• Make recommendations regarding the maintenance of the IG web pages on both the intranet and internet websites.
• Support the IG Service Manager with the handling of complaints relating to data protection breaches.
• Identify opportunities for sharing wider learning with staff and deliver these where appropriate.
• Log and process Corporate Subject Access Requests.
• Support with the processing of police personal data disclosures, including the redaction of documents.
• Coordinate and attend the Information Governance Steering Group (IGSG) meetings, including sending out meeting invitations, producing and circulating agendas and reports, taking and producing minutes for the meeting, and updating the Action Tracker log.
• Undertake additional tasks as the IG Manager may determine and which are appropriate to the grade, including those tasks and projects which are related to the development of IG across KCH.

Please note this is not a comprehensive list of all duties and responsibilities may change (within reason) as service needs change.