Job title: Data Protection Officer Grade: PO 5 Role code: EEL0312 Status: Police Staff Home Office code: Organisational Support
Main purpose of the role:
Provide leadership for the force in respect the Data Protection law and public disclosure, working with the Head of Information Management in order to ensure delivery of Information Management services and statutory obligations of the force in relation to the responsibilities of the Data Protection Officer. Developing effective relationships to further all aspects of data security, advising and guiding officers and staff at all levels to ensure the Force remains compliant with the legislation and the very best service is provided to the public.
Advise senior officers, Information Asset Owners, and the workforce in general in relation to the practical application and compliance with the Data Protection Act, the Freedom of information Act, Common Law Police Disclosure, Civil disclosure and family court disclosure in order that individual rights are protected, the statutory obligations placed on the Force are met and any risks appropriately managed.
Develop and maintain policy, practice and procedures in order to ensure policing and organisational activity is compliant with data protection and associated legislation.
Monitor compliance with such policies, including assigning responsibilities within those policies, raising awareness and ensuring appropriate training is in place for relevant ranks/grades and positions.
Advise on the undertaking and completion of data protection impact assessments when new or alternative processing activities are proposed, so as to enable solutions to be developed which meet the strategic and organisational objectives of the Force and compliant with the Data Protection Act.
Maintain detailed and current knowledge of the Data Protection Act, the Freedom of Information Act, and the relevant legislation that surrounds family civil court orders and civil disclosure, equally an understanding the numerous systems that are operated within the Force and the legal context for their use.
Provide expert advice to the wider Force, providing advice and decisions based on current guidance issued by the Information Commissioner and or NPCC, ensuring that future developments are factored in to force policy and practice to ensure information systems and their procedure and practices comply with the relevant legislation.
Review all data protection breaches without delay and where appropriate, refer such breaches to the Information Commissioner in accordance with legislation. This will include providing direction and support to ensure the circumstances are effectively investigated, any conduct matters are referred to the Professional Standards Department and any lessons learnt are shared and when appropriate translated into policy, procedure and training amendment. Prepare statements, produce evidence and appear as an expert witness in court, as required.
The statutory responsibility of the Data Protection Officer is set out in the Data Protection legislation (GDPR Articles 37, 38 & 39, & DPA Sections 69, 70 & 71).
Management Vetting, (MV).
Essential - The post-holder will have a comprehensive working knowledge of the legislation surrounding Data Protection Act, the Freedom of information Act, and the relevant legislation that surrounds family civil court orders and civil disclosure. They will need a sound understanding of information security, specifically within a progressive police force, together with substantial amount of practical experience of the issues surrounding public access to information. The post holder should have 5-10 years experience in information Management.
A thorough working knowledge of police computer systems, underpinned by an in depth knowledge of the legislative framework surrounding the use of computers is also required.
Excellent communication, presentational and interpersonal skills are essential for the role holder to hold the credibility and confidence of Chief Officers, Members of the Police & Crime Commissioners Office, senior police personnel and key stakeholders and partners at national and regional forums. It is essential that the post holder is able to think strategically and possess the necessary technical and communications knowledge to contribute to and influence strategic operational and information security developments.
Desirable - There is a preference that the post holder has a relevant professional qualification or if not commit to obtain a BCS (the Chartered Institute for IT) Data Protection Practitioners certification within three years of appointment.
Analyse Critically (Level 2)
I ensure that the best available evidence from a wide range of sources is taken into account when making decisions. I think about different perspectives and motivations when reviewing information and how this may influence key points. I ask incisive questions to test out facts and assumptions, questioning and challenging the information provided when necessary. I understand when to balance decisive action with due consideration. I recognise patterns, themes and connections between several and diverse sources of information and the best available evidence. I identify when I need to take action on the basis of limited information and think about how to mitigate the risks in doing so. I challenge others to ensure that decisions are made in alignment with our mission, values and the Code of Ethics.
Collaborative (Level 2)
I manage relationships and partnerships for the long term, sharing information and building trust to find the best solutions. I help create joined-up solutions across organisational and geographical boundaries, partner organisations and those the police serve. I understand the local partnership context, helping me to use a range of tailored steps to build support. I work with our partners to decide who is best placed to take the lead on initiatives. I try to anticipate our partners' needs and take action to address these. I do not make assumptions. I check that our partners are getting what they need from the police service. I build commitment from others (including the public) to work together to deliver agreed outcomes.
Deliver, Support and Inspire (Level 2)
I give clear direction and expectations, helping others to understand how their work operates in the wider context. I identify barriers that inhibit performance in my teams and take steps to resolve these, enabling others to perform. I lead the public and / or colleagues, where appropriate, during incidents or through the provision of advice and support. I ensure the efficient use of resources to create the most value and the right impact within my areas. I keep track of changes in the external environment, anticipating both the short and long term potential implications for the Police Service. I motivate and inspire others to achieve their best.
Emotionally Aware (Level 2)
I consider the perspectives of people from a wide range of backgrounds before taking action. I adapt my style and approach according to the needs of the people I am working with, using my own behaviour to achieve the best outcome. I promote a culture that values diversity and encourages challenge. I encourage reflective practice among others and take the time to support others to understand reactions and behaviours. I take responsibility for helping to ensuring the emotional well being of those in my teams. I take the responsibility to deal with any inappropriate behaviours.
Innovative and Open-minded (Level 2)
I explore a number of different sources of information and use a variety of tools when faced with a problem and look for good practice that is not always from policing. I am able to spot opportunities or threats which may influence how I go about my job in the future by using knowledge of trends, new thinking about policing and changing demographics in the population. I am flexible in my approach, changing my plans to make sure that I have the best impact. I encourage others to be creative and take appropriate risks. I share my explorations and understanding of the wider internal and external environment.
Take Ownership (Level 2)
I proactively create a culture of ownership within my areas of work and support others to display personal responsibility. I take responsibility for making improvements to policies, processes and procedures, actively encouraging others to contribute their ideas. I am accountable for the decisions my team make and the activities within our teams. I take personal responsibility for seeing events through to a satisfactory conclusion and for correcting any problems both promptly and openly. I actively encourage and support learning within my teams and colleagues.
I take into account individual needs and requirements in all of my actions. I understand that treating everyone fairly does not mean everyone is treated the same. I always give people an equal opportunity to express their views. I communicate with everyone, making sure the most relevant message is provided to all. I value everyone's views and opinions by actively listening to understand their perspective. I make fair and objective decisions using the best available evidence. I enable everyone to have equal access to services and information, where appropriate.
I always act in line with the values of the police service and the Code of Ethics for the benefit of the public. I demonstrate courage in doing the right thing, even in challenging situations. I enhance the reputation of my organisation and the wider police service through my actions and behaviours. I challenge colleagues whose behaviour, attitude and language falls below the public's and the service's expectations. I am open and responsive to challenge about my actions and words. I declare any conflicts of interest at the earliest opportunity. I am respectful of the authority and influence my position gives me. I use resources effectively and efficiently and not for personal benefit.
Public Service (Accredited)
I act in the interest of the public, first and foremost. I am motivated by serving the public, ensuring that I provide the best service possible at all times. I seek to understand the needs of others to act in their best interests. I adapt to address the needs and concerns of different communities. I tailor my communication to be appropriate and respectful to my audience. I take into consideration how others want to be treated when interacting with them. I treat people respectfully regardless of the circumstances. I share credit with everyone involved in delivering services.
I ensure that my decision-making rationale is clear and considered so that it is easily understood by others. I am clear and comprehensive when communicating with others. I am open and honest about my areas for development and I strive to improve. I give an accurate representation of my actions and records. I recognise the value of feedback and act on it. I give constructive and accurate feedback. I represent the opinions of others accurately and consistently. I am consistent and truthful in my communications. I maintain confidentiality appropriately.
Business Planning (Level 5)
Manages the production of the Division / Department Business Plan, ensuring it supports the strategic aims of the Annual Force Policing Plan. Monitors and reviews local plans and ensures objectives and targets are achieved. Instigates remedial action where necessary. Advises Chief Officers of successes to ensure these are effectively communicated both within and outside the Force.
Data and Systems Security (Level 3)
Able to undertake the testing of data to ascertain accuracy and can report findings and implications to the appropriate authority. Can create and request non standard reports from systems and interpret information supplied from system and audit logs. Recognises when technology has been misused and displays discretion in identifying the appropriate response. Aware of the software, hardware and environmental controls that should be in place and whether they are operating effectively. Familiar with a range of Force systems, networks, their use and registration. Possession of QiCA is desirable.
Health and Safety (Level 4)
Has received Supervisor training and takes responsibility for the safety of directly subordinate staff and visitors. Understands the procedures in place for the safe storage of hazardous substances, fire precautions and evacuation. Resolves hazards or problems identified within roles or work environments. Undertakes skills passport assessments for new and existing staff. Re-assesses passport as and when new equipment/technology is introduced. Completes annual reviews of skills passports, training needs analysis.
Information Gathering and Analysis (Level 4)
Is able to identify reliable and appropriate sources of information and select methods of gathering information which are efficient and effective. Has a working knowledge of legislation and policy relevant to the collection, recording, storage and distribution of information.
Information Management and Technology (Level 4)
Can conduct basic computer searches and can correctly interpret data generated. Can create and amend records, according to role requirement. Knows established rules and protocols. Understands impact of data quality, and is self-monitoring on data quality issues.
Inspection (Level 5)
Provides quality assurance for inspection process and reports produced. Is able to win commitment from managers to accept the findings and recommendations made within the reports and advise on the formulation and revision of policy. Maintains links with HMIC, the Audit Commission and KCC auditors to ensure a holistic inspection of the Force is conducted. Plans inspection cycle taking consideration of other reviews, demands and resources. Matches skills of inspection team to work being undertaken so as to obtain the best result possible. IIA qualification desirable.
Internal Consultancy (Level 4)
Demonstrates an in depth knowledge of the relevant specialist area and combines this with high level consultancy skills. Develops collaborative relationships with internal clients and works with them to achieve joint objectives and targets. Maintains an up to date awareness of all developments which may affect Force business and policies and proactively advises clients of all relevant matters.
Interviewing - General (Level 4)
Has received some training in reliable interviewing techniques and is able to apply these techniques fairly, consistently and to good effect. Identifies the key issues for examination and tests these using open and probing questions. Identifies weaknesses and inconsistencies in the account and seeks clarification. Keeps good written records of the interview for future
Knowledge of Police Environment and Policy (Level 6)
Possesses a broad and wide ranging knowledge of the police service, legislation and policy which is consistent with the demand for strategic influence in respect of particular areas of activity. Will have formed a reliable network of contacts, nationally and locally, which can be used to support and enhance developmental initiatives.
Management of Police Information (MOPI) (Level 6)
Review, monitors and produces recommendations for revisions to policies and operating procedures for specialist area/ systems. Following agreement implements changes and disseminates changes to all relevant personnel, updating all associated processes and procedures whilst ensuring compliance with force policies, procedures and any relevant legislation. Provides advice and guidance to system users from outside of own section or directorate. Directs quality assurance processes in respect of prioritisation, sanitisation, dissemination, sharing, relevancy, accuracy, adequacy and timeliness.
Office Technology (Level 4)
Demonstrates advanced skills in the use of one or more office software products Able to use these packages to enhance the quality or presentation of work required within the role. Manages data files and file structures. Provides on the job training and guidance to other staff in the use of specific or specialist software, if required. Familiar with established IT rules and protocols and shows a good understanding of data protection requirements.
Project Management (Level 3)
Demonstrates an understanding of the key principles of project management. Able to assist in the management of projects within a Department or Division where the objectives, milestones and timescales have already been defined and manpower resources are limited. Will need project management support.
Training (Level 4)
Understands the various principles and methods of training and utilises them effectively. Creates, structures and delivers training from a basic outline or a previously identified skills gap. Able to tailor the training to address the needs of the group to be trained. Able to deliver a range of training courses/ packages on related subjects. Identifies and utilises available internal/external trainers, training resources and packages, as appropriate.