Data Protection Officer

Role Overview

Rank/Scale: PO2. Position: Head of Governance and Compliance. This role serves as the Force Data Protection Officer and Force Freedom of Information Officer, responsible for managing the application of the Association of Chief Police Officers Data Protection and Freedom of Information Authorised Professional Practice (APP).

Key Responsibilities

1. Final sign off of disclosures made on behalf of the Chief Constable.

2. Act as the primary point of contact for the Information Commissioner's Office, managing S55 data breaches, maintaining breach logs, preparing rationale for reporting, reviewing practices, liaising with internal departments (Professional Standards, Chief Officer Group), and interpreting ICO decisions.

3. Provide strategic advice and compliance guidance on legislation to ensure information disclosure and protection are respected across all levels and within Constabulary policies, procedures and projects.

4. Assist project managers by implementing Privacy Impact Assessments and keeping a log of all advisory activities.

5. Manage the Information Disclosure Team, including performance management via the Individual Performance Review (IPR) system, organising annual and interim meetings, and setting objectives.

6. Develop and administer an effective appeal mechanism under the Freedom of Information Act 2000.

7. Lead the implementation and ongoing use of a Data Protection and Freedom of Information training package for all personnel, maintain training logs, and enforce annual or mandatory training with line managers.

8. Possess a thorough working knowledge of formal disclosure to statutory bodies and individuals in the domains of FOI, Environmental Information Regulation, Data Protection SAR, Section 35 civil legal proceedings, CLPD pulls, Insurance MoUs, CAFCASS, CICA, and information sharing agreements.

9. Ensure all disclosures meet legal obligations and best practice, conduct regular reviews, adhere to service level agreements, and comply with legislation and national guidance.

10. Conduct research, analysis, and evaluation of crime, intelligence, and relevant information, interrogating national databases where necessary to produce accurate documentation.

11. Maintain updated knowledge of DP and FOI legislative guidance, advising on implications of external developments such as legislation and Information Commissioner decisions.

12. Create Data Processing Agreements with external contractors and liaise with the Force Vetting Officer to ensure contractors meet appropriate vetting levels.

13. Develop and maintain relationships with other Forces and agencies, representing the Constabulary at regional and national levels.

14. Serve as the focal point for Data Protection, FOI, and Information Sharing matters within the Force, ensuring implementation of all policies, procedures, and measures in line with the APP.

Additional Information

Vetting Level: Minimum Management Vetting (MV & SC). Mobility: The Force may re task the role or relocate to any post within Gloucestershire. Working Pattern: 37 hours per week (pro rata) with potential shift, night, weekend and public holiday work. Travel: Required to attend regional and national meetings. Training & Development: Continuous professional knowledge and attendance at relevant courses.

Minimum Criteria

• Hold a professional Data Protection and/or FOI qualification.
• Proven substantial experience in Data Protection/FOI, especially in decision making.
• Experience managing a team.
• Experience in a confidential environment and demonstration of high personal integrity.
• Excellent verbal and written communication skills (presentations, reports).
• Strong attention to detail.

Desirable

• Previous experience within a policing environment.

Legal Notice

This role is Politically Restricted and defined by legislation as 'Sensitive'.