Head of Data Protection and Information Access 34 views

What is the Data and Information Access team? 

The Data Protection and Information Access team works as part of the Maritime and Coastguard Agency’s (MCA’s) Corporate Governance framework to inform the Agency’s compliance with Data Protection and Information Access Legislations.

The team provides independent, expert advice and guidance to the Agency, its staff, volunteers and third parties.

The team act as a point of contact to ensure lawful and compliant processing and disclosure of personal information under the relevant legislations.

The function acts to ensure that the MCA’s Executive Officers and Board are adequately informed and advised of Data Protection and Information Access risks, best practice and relevant updates or changes to the regulatory landscape.

Who is the Head of Data Protection and Information Access? 

The Head of Data Protection and Information Access is responsible for carrying out the delegated statutory tasks of the Department for Transport (DfT) Data Protection Officer (DPO) in accordance with the DfT DPO Governance Framework.

They are the DPO’s principal point of contact within the MCA, able to operate within their business area with the independence and protections afforded to a DPO. The role will facilitate and support the MCA’s compliance with Data Protection Legislations, ensuring a sensible and proportionate approach is taken to help the department do its business in a way that inspires staff and public trust and confidence. They also act as the principal point of contact for the ICO and for Data Subjects for the MCA within the DfT controllership.

The role is also responsible for overseeing the Agency’s compliance with information access/information rights legislations; the Freedom of Information Act 2000 (FOIA), Environmental Information Regulations 2004 (EIR) and the Subject Access provisions of the General Data Protection Regulation (GDPR)/Data Protection Act 2018 (DPA), ensuring lawful and compliant processing of requests for the MCA.

Your responsibilities include but are not limited to:

• Providing expert, timely, risk-based advice to business areas and risk owners on DPIAs, privacy notices, data sharing, data processing contracts, overseas transfers and all other aspects of data protection compliance

• Ensuring you and team continue to develop expert knowledge of data protection law, and gain/maintain suitable professional qualifications

• Proactively promote data protection compliance across Agency – develop and maintain an annual Training & Awareness plan that provides for delivery of both general awareness-raising activities and targeted Training & Awareness according to nature of roles

• Implementing and maintaining effective guidance, policies and procedures, in line with ICO Accountability Framework expectations and overarching DfT Data Protection policy

• Assessing Agency against ICO Accountability Framework annually – provide DPO with update and action plan to address areas of non-compliance
• Oversee the compliant disclosure of information under the Freedom of Information Act/Environmental Information Regulations and the Subject access provisions of the General Data Protection Regulation (GDPR)/Data Protection Act 2018 (DPA), providing expert guidance to ensure lawful disclosures of information to data subjects or investigating authorities.

About You

To be successful as the Head of Data Protection and Information Access, you will have:

• Expert knowledge of data protection law and practices, and will hold at least a practitioner level, industry-recognized qualification in data protection.
• Experience in information security principals and standards and be able to apply this alongside data protection legislation to advise data and security professionals in developing data management standards and processes.
• Experience in risk management methodologies.
• A history of working collaboratively and inclusively with external organisations and other stakeholders, sharing information and knowledge to achieve common aims.
• Excellent communication skills, both verbal and written, highly skilled in the delivery and absorption of information with colleagues at all levels.
• Excellent presentation and public speaking ability, particularly with regard to delivery of training and reporting to senior executives.
• A background in managing diverse teams of people, motivating them to deliver challenging and sometimes conflicting objectives.
• Experience in information access legislation; the Freedom of Information Act 2000, Environmental Information Regulations 2004, the subject access provisions under UK GDPR/ DPA and the exemptions and application of those requirements