Head of Information Governance

Role Overview

The Head of Information Governance / Data Protection Officer provides corporate strategic leadership, statutory accountability, and professional authority for Information Governance, data protection, and data security across the Norfolk and Waveney Acute Hospitals Collaborative.

The postholder is the organisation’s designated Data Protection Officer (DPO) under UK GDPR and the Data Protection Act 2018 and operates independently in this statutory capacity. The role holds corporate responsibility for ensuring the lawful, fair, and transparent processing of personal data, including highly sensitive health information, across multiple Acute Trusts.

The postholder provides authoritative advice and assurance to Trust Boards, Executive Directors, Caldicott Guardians, Senior Information Risk Owners (SIROs), and system partners, ensuring that robust governance frameworks are embedded across digital transformation, clinical services, research activity, and corporate functions. The role carries significant corporate accountability for safeguarding patient, staff, and organisational information assets. Misinterpretation, governance failure, or non-compliance at this level could result in regulatory enforcement action, substantial financial penalties, service disruption, reputational damage, loss of public trust, and patient harm.

Key Responsibilities

• Lead the development and implementation of the Collaborative’s Information Governance and Data Protection Strategy, ensuring alignment with NHS policy, national legislation, ICS objectives, and digital transformation priorities.
• Act as the statutory Data Protection Officer, providing independent oversight and advice regarding compliance with UK GDPR, Data Protection Act 2018, PECR, Caldicott Principles, and NHS information governance standards.
• Provide authoritative and independent advice on complex data protection matters, including lawful basis for processing, special category data, information sharing agreements, cross‑border data transfers, research governance, and system‑level data integration.
• Work centrally with NHS and other stakeholders to embed robust governance frameworks across clinical services, digital transformation, and corporate functions.

Benefits

• Flexible working hours
• Fast Track Staff Physiotherapy Service
• Multi Faith prayer room at NNUH Colney Lane site
• Discounted gym memberships
• Generous pension scheme and annual leave entitlement
• Wagestream – access up to 40% of your pay as you earn it
• Free Park & Ride service direct to NNUH Colney Lane site
• Free 24 hour confidential counselling support
• On‑site nursery at NNUH Colney Lane
• On‑site cafes offering staff discounts at NNUH Colney Lane
• Support in career development
• Flexible staff bank
• Salary sacrifice schemes including lease cars, Cycle to Work scheme and home electronics