Data Protection Officer

Role title 

Data protection Officer (DPO)

Organisation and who benefits

The Harpenden Trust provides a variety of support for families, individuals, and other local charitable organisations, all within the AL5 postcode.  

Over 500 volunteers are involved in a wide range of projects, from financial support and outings to wellbeing and befriending. All of our work is carried out with our Trust values uppermost in our minds: with care and kindness, with community spirit and with creativity and commitment. 

The Role 

As part of the Audit, Risk and Governance team, the DPO will oversee the Trust’s Data Protection (DP) strategy and implementation, to ensure compliance with relevant legislation, including UK GDPR and Data Protection`act 2018. 

The DPO will act as the Trust’s primary point of contact for data protection matters, supporting all workers to handle personal data responsibly and safeguarding the rights of clients, supporters, and workers. 

Main tasks

The DPO will:

·       Promote a culture of DP and privacy throughout the Trust

·       Develop, maintain and update DP policies, procedures and guidance

·       Be the main point of contact for DP queries across the Trust and provide guidance and support on the handling of necessary personal data 

·       Monitor and advise on lawful bases for processing, data sharing and consent mechanisms, and on the Trust’s compliance with DP laws and internal policies

·       Conduct regular data audits and risk assessments to identify potential compliance gaps

·       Act as the primary contact for the Information Commissioner’s Office (ICO) and other relevant regulatory bodies

·       Keep up to date with developments in DP legislation and best practice, advising senior management accordingly

Skills, experience and qualities needed 

Strong understanding of UK GDPR, Data Protection  Act 2018 and other relevant legislation

Experience in applying DP principles in an organissation (preferably, but not necessarily, in a Charity)

Excellent communication skills, with the ability to explain complex issues in plain language

Ability to work independently, taking the lead on GDPR and DP matters, and to provide clear, practical advice

Strong organisational skills and an attention to detail 

When

Approximately 2-3 hours per week

Where

Home based, with meetings at Trust premises. ARG Committee meets quarterly. Attending other meetings as and when necessary

Reporting to 

Chair of Trustees/ Chair of Audit, Risk and Governance Committee

What can volunteers get out of it 

Satisfaction in the knowledge that the Trust is adhering to all DP law and helping to avoid any issues which could result in reputational damage to the Trust

Other information 

Application form and 2 references

Initial and ongoing training as required