JOB SUMMARY

Information Management and Privacy (IMP)’s mission is to provide modern, robust IG (Information Governance) services and assurance of UKHSA data, information, and records.
We do this by enabling the organisation to prepare and respond more effectively to health threats by enhancing the controlled and lawful use of our data and information, building public trust, and safeguarding the reputation of the organisation.
As an integral part of our Information Management and Privacy division, you will play a pivotal role as a data protection subject matter expert, conducting thorough data protection impact assessments, ensuring compliance with relevant data protection laws and standards, and serving as a primary point of contact for inquiries about data sharing.
Your expertise will be instrumental in providing insightful advice on data protection requirements, as well as striking a balance between safeguarding data and maximizing the public health benefit derived from sharing data with public health partners, the NHS, universities and industry. Your efforts will directly contribute to serving UKHSA’s health security remit, making a tangible impact on public health outcomes through data driven decision making.
To thrive in this role, you should bring a foundation of data protection knowledge, coupled with strong organisational skills and an unwavering attention to detail. Being a self-starter is essential, as is the ability to manage competing demands and prioritise effectively.
We pride ourselves as being an employer of choice, where Everyone Matters promoting equality of opportunity to actively encourage applications from everyone, including groups currently underrepresented in our workforce.
UKHSA ethos is to be an inclusive organisation for all our staff and stakeholders. To create, nurture and sustain an inclusive culture, where differences drive innovative solutions to meet the needs of our workforce and wider communities. We do this through celebrating and protecting differences by removing barriers and promoting equity and equality of opportunity for all.

JOB DESCRIPTION

The job holder will be required to carry out the following responsibilities, activities, and duties:

• Acting as a Data Protection subject matter professional and the first point of contact for data sharing related process queries, providing specialist advice on request
• Providing effective support to stakeholders and undertaking assessment of requests to process UKHSA data or for UKHSA to acquire data controlled by a third party.
• Preparing and maintaining documentation to demonstrate compliance with data protection laws.
• With supervision, executing data sharing agreements with external partners, outlining the terms, conditions, and safeguards for sharing personal data while protecting the rights of data subjects.
• Logging, updating, and tracking the progress of data requests, taking personal responsibility for maintaining good records.
• Supporting the update and maintenance of the corporate data sharing register, Register of Processing Activities (ROPA), public-facing Data Approvals Register and other relevant risk and issues registers.
• Understanding, in detail, the legal, policy or ethical constraints that may impact sharing of data, ensuring these are understood and adhered to within data sharing applications and agreements.

The duties/responsibilities listed above describe the post as it is at present and is not intended to be exhaustive. The job holder is expected to accept reasonable alterations and additional tasks of a similar level that may be necessary.
Proficiency in Microsoft Office, including Word, Excel, and PowerPoint, is also a prerequisite for this position.
This position sits within the Data Release & Acquisition team, who deliver a request-response service for UKHSA specialising in supporting third parties to access UKHSA data for secondary purposes, including research.
As part of DR&A, the postholder is expected to use their own initiative and be able to work with minimal supervision to facilitate the end-to-end management of data access applications, providing specialist advice and recommendations on data sharing, as well as, undertaking specific project work as and when necessary to support the acquisition of new data into UKHSA.
The role will require you to liaise with internal and external stakeholders to deliver a customer-centric service, while working within data protection laws and ICO best practice.
You will manage a portfolio of data application requests, preparing and maintaining documentation and under supervision of senior managers and the Head of Data Release & Acquisition, be responsible for drafting and executing data sharing agreements with external partners, ensuring the terms, conditions, and safeguards for sharing personal data are well-defined, while safeguarding the rights of data subjects.
Throughout everything you do, you will champion the highest levels of information governance and customer care. You will develop working relationships and communicating regularly with a wide range of individuals, clinical and non-clinical, internal and external to UKHSA. This includes:

Internal

• Managers and staff in other IMP teams
• Data Protection Officer
• Caldicott Guardian Office
• Information Asset Owners and system administrators
• Directorate and division information governance support officers

External

• Department of Health and Social Care Information Risk Management and Assurance team
• External data controller and data processor representatives
• Prospective and active applicants for data

For a full list of the main duties and responsibilities of the role, please refer to the attached Job Description.

ESSENTIAL CRITERIA

You will be assessed on the below 11 essential criteria, which have been selected from the Job Description Document.

• Educated to degree level in a relevant subject such as law, computer science, information security or equivalent level of experience
• Interest in, and understanding of, data protection legislation and its application to health data
• Excellent attention to detail
• Excellent written and verbal communication skills
• Ability to prioritise between competing pressures and demands
• Ability to work independently and collaboratively with cross-functional teams, including for periods without direct supervision
• Self-awareness and resilience when dealing with conflict or challenging situations
• A values-based approach to how data is utilised, ensuring that it is not only lawful but fair, meeting the reasonable expectations of the people whose data UKHSA is entrusted to protect
• Proficient in using Microsoft 365, including Excel.
• An understanding of and commitment to diversity and inclusion in the workplace, equality of opportunity and good working relationships.
• Understand that bullying, harassment, and discrimination are unacceptable.

NATIONALITY REQUIREMENTS

This job is broadly open to the following groups:

• UK nationals
• nationals of the Republic of Ireland
• nationals of Commonwealth countries who have the right to work in the UK
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS)
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS)
• individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020
• Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service

Further information on nationality requirements

The job holder will be required to carry out the following responsibilities, activities, and duties:

• Acting as a Data Protection subject matter professional and the first point of contact for data sharing related process queries, providing specialist advice on request
• Providing effective support to stakeholders and undertaking assessment of requests to process UKHSA data or for UKHSA to acquire data controlled by a third party.
• Preparing and maintaining documentation to demonstrate compliance with data protection laws.
• With supervision, executing data sharing agreements with external partners, outlining the terms, conditions, and safeguards for sharing personal data while protecting the rights of data subjects.
• Logging, updating, and tracking the progress of data requests, taking personal responsibility for maintaining good records.
• Supporting the update and maintenance of the corporate data sharing register, Register of Processing Activities (ROPA), public-facing Data Approvals Register and other relevant risk and issues registers.
• Understanding, in detail, the legal, policy or ethical constraints that may impact sharing of data, ensuring these are understood and adhered to within data sharing applications and agreements

You will be assessed on the below 11 essential criteria, which have been selected from the Job Description Document.

• Educated to degree level in a relevant subject such as law, computer science, information security or equivalent level of experience
• Interest in, and understanding of, data protection legislation and its application to health data
• Excellent attention to detail
• Excellent written and verbal communication skills
• Ability to prioritise between competing pressures and demands
• Ability to work independently and collaboratively with cross-functional teams, including for periods without direct supervision
• Self-awareness and resilience when dealing with conflict or challenging situations
• A values-based approach to how data is utilised, ensuring that it is not only lawful but fair, meeting the reasonable expectations of the people whose data UKHSA is entrusted to protect
• Proficient in using Microsoft 365, including Excel.
• An understanding of and commitment to diversity and inclusion in the workplace, equality of opportunity and good working relationships.
• Understand that bullying, harassment, and discrimination are unacceptable