This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
The Data Protection Assistant supports the Data Protection Officer (DPO) in delivering Harbour Healthcare's data protection and information governance programme across its residential and nursing care services. The post holder will assist in managing Subject Access Requests, third-party disclosure requests, deceased resident record requests, NHS Continuing Healthcare requests, data incidents, records management activities, audits, compliance monitoring and regulatory enquiries. The role acts as a key point of contact for care homes, operational teams, residents, relatives, legal representatives, healthcare professionals, regulators and external agencies, ensuring personal information is handled lawfully, securely and in accordance with UK data protection legislation and information governance requirements.
Job Responsibility
Coordinate and administer Subject Access Requests (SARs) and other rights requests received under UK GDPR
Verify identity and authority of requestors
Log requests and monitor statutory deadlines
Liaise with care homes and departments to obtain records
Review information received for completeness
Prepare disclosure packs for review and release
Maintain accurate audit trails and request records
Escalate complex requests to the DPO
Support the assessment and administration of third-party requests for information
Review evidence of authority
Assist with requests from various external agencies
Assess lawful authority for disclosure under the guidance of the DPO
Prepare records for disclosure and maintain disclosure logs
Support requests made under the Access to Health Records Act 1990
Verify entitlement and authority to access records
Coordinate retrieval of archived records
Prepare records for disclosure and review
Review records prior to disclosure
Identify third-party information requiring redaction
Apply redactions in accordance with Harbour Healthcare procedures
Maintain disclosure schedules and audit trails
Ensure information released is accurate, relevant and authorised
Log information governance incidents and near misses
Conduct initial fact-finding and evidence gathering
Support investigations into suspected data breaches
Assess potential risks to individuals
Track corrective and preventative actions
Escalate significant incidents to the DPO
Maintain breach and incident registers
Support compliance with records retention schedules
Assist care homes with records retrieval and archiving processes
Maintain records management logs and registers
Support archive reviews and secure destruction activities
Assist with records management audits
Provide day-to-day information governance advice to care home managers and administrators
Assist homes in locating, collating and securely transferring records
Support operational teams with data protection queries
Promote compliance with Harbour Healthcare policies and procedures
Maintain records within governance systems including Radar Healthcare and associated compliance systems
Monitor request and incident workflows
Produce reports, statistics and management information
Support governance meetings and reporting requirements
Requirements
Experience working in an administrative, compliance, governance or information management role
Excellent organisational and record-keeping skills
Strong written and verbal communication skills
High level of attention to detail
Ability to manage multiple priorities and deadlines
Ability to handle sensitive and confidential information appropriately
Proficient in Microsoft Office 365 applications
Ability to work independently and as part of a team
Experience within health or social care
Experience handling Subject Access Requests or disclosure requests
Experience investigating incidents or complaints
Knowledge of UK GDPR
Knowledge of Data Protection Act 2018
Knowledge of Access to Health Records Act 1990
Knowledge of Mental Capacity Act 2005
Knowledge of Caldicott Principles
Knowledge of Records Management and Retention
Ability to travel occasionally to services and meetings
Commitment to maintaining confidentiality and professionalism at all times
Willingness to undertake relevant training and professional development
Nice to have
Experience within health or social care
Experience handling Subject Access Requests or disclosure requests