# Information Rights Officer > NHS job listing from Job Clerk for East London NHS Foundation Trust. ## Canonical URLs - **HTML:** https://www.jobclerk.com/job/information-rights-officer/0b929ca7-8f96-4732-b7df-fdd4eff4052b - **Markdown:** https://www.jobclerk.com/job/information-rights-officer/0b929ca7-8f96-4732-b7df-fdd4eff4052b.md ## Summary - **Status:** Live - **Employer:** East London NHS Foundation Trust - **Town:** London - **Region:** London - **Country:** England - **Profession:** Administrative and IT - **Grade:** Band 4 - **Salary:** £34,186 - £37,389 Per annum - **Contract type:** Permanent - **Closing date:** 2026-06-24T23:59:00.000Z - **Posted:** 2026-06-08T13:33:29.410Z - **Source information URL:** https://www.healthjobsuk.com/job/UK/London/London/East_London_NHS_Foundation_Trust/Data_Protection/Data_Protection-v7992716 - **Application URL:** https://apps.trac.jobs/job-advert/7992716?ShowJobAdvert=&feedid=9002 - **Employer website:** https://www.elft.nhs.uk ## Job Content ### Job overview Our Information Rights Officers process subject access requests to tight timescales under various legislation. We are looking for an individual who is well organised, has excellent Office skills and has a working knowledge of the the UK GDPR, Data Protection Act and other relevant legislation. If you are a good communicator, have the ability to explain things clearly to a wide variety of different audiences with different levels of understanding, can remain calm at all times and work effectively to challenging timescales, then this may be the job for you. ### Main duties of the job The post holder is a point of contact across the Trust for individuals seeking personal information under data protection and related legislation. You will manage a portfolio of your own subject access requests and will support processes for obtaining archived records. The post holder will also on occasion support Freedom of Information processes. ### Detailed job description and main responsibilities Be a point of contact across the Trust when individuals or their representatives seek access to their personal information Provide basic advice and assistance to requesters or their representatives seeking access to their personal information - Liaise and correspond with data subjects and their representatives, ensuring they are kept up to date at all times and that their requests are satisfied within relevant timescales. This may include contact in a hostile environment when data subjects are distressed, unwell or have made a complaint Acknowledge requests, liaising with the requester where necessary to ensure the correct documentation has been received including consent, identification and authority Interrogate clinical and other systems to identify requested information Liaise with other teams including the electronic clinical systems help desk, complaints, incidents and legal affairs teams as necessary to ensure all requested information is available Liaise with archiving and off site storage providers to obtain inactive records required as part of a disclosure, ensuring that scan on demand copies are scrutinised and added to the service user’s electronic clinical record to relevant technical standards Undertake redaction of third party and other information, working closely with the responsible clinician to ensure each disclosure is individually appropriate Provide basic advice to locality teams on the principles of disclosure for access to records requests to facilitate timely and appropriate responses to requests Ensure that archived records are obtained in an electronic format in an appropriate and timely way, using good organisation skills to minimise any budgetary impact. This is likely to include liaison with locality leads, local administrative staff and archiving providers When requested undertake basic FOI duties including logging and acknowledging requests, uploading anonymised responses to the website etc Support the team when required to undertake routine compilation of responses which may require extracting information from databases and spreadsheets Process requests which may have tight and differing deadlines from data subjects, police, solicitors, the courts and any other statutory organisations On allocation of an access to records request, be responsible for the end to end process associated with processing the request from initial scrutiny and verification of documentation to the final disclosure Maintain an up to date basic knowledge of data protection legislation permitting access to personal information and their related statutory changes and initiatives Scrutinise received scan on demand records for pagination, formatting and identity prior to uploading to the relevant electronic clinical record  to relevant technical standards Confirm with the archiving provider once a scanned record has been accepted to ensure archiving catalogues are amended as appropriate and destruction certificates obtained Liaise with relevant clinical teams when another individual’s  information is identified within a scanned record to ensure it is subsequently filed with the correct records Participate in annual audits with archiving providers to ensure the requirements of the Data Security & Protection Toolkit are met Help coordinate the annual and ongoing review, retain or delete process for records that have reached the end of their retention period, ensuring that processes are followed, reports taken to the relevant internal committees and destruction certificates obtained ## Job Details Our Information Rights Officers process subject access requests to tight timescales under various legislation. We are looking for an individual who is well organised, has excellent Office skills and has a working knowledge of the the UK GDPR, Data Protection Act and other relevant legislation. If you are a good communicator, have the ability to explain things clearly to a wide variety of different audiences with different levels of understanding, can remain calm at all times and work effectively to challenging timescales, then this may be the job for you. ## Job Description The post holder is a point of contact across the Trust for individuals seeking personal information under data protection and related legislation. You will manage a portfolio of your own subject access requests and will support processes for obtaining archived records. The post holder will also on occasion support Freedom of Information processes. ## Responsibilities Be a point of contact across the Trust when individuals or their representatives seek access to their personal information Provide basic advice and assistance to requesters or their representatives seeking access to their personal information Liaise and correspond with data subjects and their representatives, ensuring they are kept up to date at all times and that their requests are satisfied within relevant timescales. This may include contact in a hostile environment when data subjects are distressed, unwell or have made a complaint Acknowledge requests, liaising with the requester where necessary to ensure the correct documentation has been received including consent, identification and authority Interrogate clinical and other systems to identify requested information Liaise with other teams including the electronic clinical systems help desk, complaints, incidents and legal affairs teams as necessary to ensure all requested information is available Liaise with archiving and off site storage providers to obtain inactive records required as part of a disclosure, ensuring that scan on demand copies are scrutinised and added to the service user’s electronic clinical record to relevant technical standards Undertake redaction of third party and other information, working closely with the responsible clinician to ensure each disclosure is individually appropriate Provide basic advice to locality teams on the principles of disclosure for access to records requests to facilitate timely and appropriate responses to requests Ensure that archived records are obtained in an electronic format in an appropriate and timely way, using good organisation skills to minimise any budgetary impact. This is likely to include liaison with locality leads, local administrative staff and archiving providers When requested undertake basic FOI duties including logging and acknowledging requests, uploading anonymised responses to the website etc Support the team when required to undertake routine compilation of responses which may require extracting information from databases and spreadsheets Process requests which may have tight and differing deadlines from data subjects, police, solicitors, the courts and any other statutory organisations On allocation of an access to records request, be responsible for the end to end process associated with processing the request from initial scrutiny and verification of documentation to the final disclosure Maintain an up to date basic knowledge of data protection legislation permitting access to personal information and their related statutory changes and initiatives Scrutinise received scan on demand records for pagination, formatting and identity prior to uploading to the relevant electronic clinical record to relevant technical standards Confirm with the archiving provider once a scanned record has been accepted to ensure archiving catalogues are amended as appropriate and destruction certificates obtained Liaise with relevant clinical teams when another individual’s information is identified within a scanned record to ensure it is subsequently filed with the correct records Participate in annual audits with archiving providers to ensure the requirements of the Data Security & Protection Toolkit are met Help coordinate the annual and ongoing review, retain or delete process for records that have reached the end of their retention period, ensuring that processes are followed, reports taken to the relevant internal committees and destruction certificates obtained ## Person Specification ### Other **Essential** - - Attention to detail - - Ability to travel to other sites ### Experience **Essential** - - Experience in responding to requests for access to personal information - - Experience of interpreting and providing technical advice and support in relation to processing requests for access to personal information - - Experience of providing information and advice to patients and the public regarding access to their personal information - - Practical experience of electronic archive and / or records management systems **Desirable** - - Experience of running and manipulating database and Excel reports - - Proven experience of working in an information rights role in a large NHS Trust - - Experience of redacting information ### Knowledge and skills **Essential** - - Knowledge and understanding of the Data Protection Act, General Data Protection Regulation and associated legislation - - Knowledge of access to records requests procedures - - Ability to prioritise and manage a number of conflicting requirements in a professional manner and deal with a number of issues at the same time - - Analytical skills to identify key facts from large amounts of information - - Ability to work under pressure in a busy working environment without supervision, particularly when meeting statutory deadlines - - Ability to undertake prolonged periods of concentration when redacting records - - Empathy, ability to deal with distressed patients/relatives and to mediate when service users and staff have differing perspectives - - Computer Literacy/word processing skills ### Education and qualifications **Essential** - - Educated to A level or equivalent experience ## Documents - [elft strategy (pdf, 153.5kb)](https://www.healthjobsuk.com/documents?edoc=1708) - [elft at a glance (pdf, 151.0kb)](https://www.healthjobsuk.com/documents?edoc=1110) - [information rights officer (pdf, 200.8kb)](https://www.healthjobsuk.com/documents?vdoc=10277956) - [elft staff benefits leaflet (pdf, 920.1kb)](https://www.healthjobsuk.com/documents?edoc=1111) - [trust demographic information (pdf, 1.5mb)](https://www.healthjobsuk.com/documents?edoc=1844) ## Agent Notes - This Markdown page is generated from the same Job Clerk job record as the HTML job detail page. - Use the canonical HTML URL for user-facing references. - Use the application URL when the user wants to apply on the source NHS site.