Data Protection and Information Governance Practitioner Apprentice (Salary – £30,283)

About this apprenticeship

Main Responsibilities:

Respond to people exercising their data protections rights, particularly the rights of access, rectification and erasure. Work with colleagues to identify and collate information that should be supplied. Ensure that requests are answered within the relevant deadlines. Maintain and improve systems for tracking how we are responding to data subject rights requests
Act as the first responder to reports of suspected data breaches
Carry out initial fact finding and make recommendations about how to address any breaches, including whether a report should be made to ICO and/or the data subject informed. Maintain and improve systems for recording data breaches or suspected breaches. Ensure learning from breaches is fed into operational practice
Respond to people who have a complaint about how we have handled their personal data. Carry out initial fact finding and make recommendations about how to respond to the complaint
Support colleagues to complete core documentation that helps the OIA demonstrate compliance with the data protection regime including
The Record of Processing Activities (ROPA)
Data Privacy Impact Assessments (DPIAs)
Legitimate Interest Assessments (LIAs)
Appropriate Policy Documents (APDs)
Maintain a regular review cycle to ensure that documentation is up to date and accurate and that risks are monitored
Prepare privacy notifications that explain what we are doing with personal data in different contexts
With support from Communications colleagues, prepare additional information for internal colleagues and external stakeholders (e.g. students who have complained to the OIA) about our approach to personal data
Develop and deliver engaging and informative training to colleagues to ensure that everyone maintains an appropriate level of knowledge and understanding about how to handle personal data appropriately within the OIA
Provide advice and guidance to all colleagues about handling personal data, covering casework activities (personal data of individuals within complaints files) as well as wider organizational activities (e.g. personal data of our staff or other stakeholders)
From time to time, look at how organisations we may partner with meet their responsibilities towards personal data. Help to prepare any necessary data sharing agreements
Keep up to date with legislative changes and best practice guidance from ICO and other relevant professional sources. Flag any developments that may affect how the OIA goes about our work
Champion excellent information management practice within the OIA. Model excellent practice in creating, storing, sharing and deleting information in accordance with records management policy
Contribute to the continuous development of records management policies, including retention policies. Monitor compliance with the records management policy, and support colleagues in developing good records management habits

Training

Data Protection and Information Governance Practitioner Level 4 apprenticeship standard

What you could go on to do

This will be discussed with you during the interview stage