Information and Privacy adviser

Job summary

Are you experienced in information access, legal, customer service or compliance?

Do you have an understanding of the Freedom of Information Act 2000, Environmental Information Regulations 2004 and UK GDPR/DPA?

Would you like to support the Agency’s compliance with information access/information rights and data protection legislations, including co-ordinating and responding to requests for information?

If so, we’d love to hear from you!

The Data Protection and Information Access team works as part of the Maritime and Coastguard Agency’s (MCA’s) Corporate Governance framework to inform the Agency’s compliance with Data Protection and Information Access Legislations.

The team provides independent, expert advice and guidance to the Agency, its staff, volunteers and third parties.

The team act as a point of contact for individuals whose personal data the MCA process and ensure lawful and compliant processing and disclosure of personal information under the relevant legislations.

The function acts to ensure that the MCA’s Executive Officers and Board are adequately informed and advised of Data Protection and Information Access risks, best practice and relevant updates or changes to the regulatory landscape.

Joining our department comes with many benefits, including:

• Employer pension contribution of 28.97% of your salary. Read more about Civil Service Pensions here
• 25 days annual leave, increasing by 1 day each year of service (up to a maximum of 30 days annual leave), plus 8 bank holidays a privilege day for the King’s birthday
• Flexible working options where we encourage a great work-life balance.

Read more in the Benefits section below!

Find out more about what it's like working at MCA:

MCA roles: Maritime and Coastguard Agency - Department for Transport Careers

Job description

The Information and Privacy Adviser will be responsible for supporting the Agency’s compliance with information access/information rights and data protection legislations, including co-ordinating and responding to requests for information.

They will provide an advisory service to the Agency on issues relating to information requested under the Freedom of Information Act 2000 (FOIA), Environmental Information Regulations 2004 (EIR) and the Subject Access provisions of the General Data Protection Regulation (GDPR)/Data Protection Act 2018 (DPA) to ensure lawful and compliant disclosure.

The role will support the Head of Data Protection in carrying out the statutory tasks of the Department for Transport (DfT) Data Protection Officer (DPO), assisting the team to deliver advice, guidance, support to the Agency, supporting compliance with the data protection legislations.

Your responsibilities will include, but aren’t limited to:

• Logging, considering and responding to Requests for Information (RFI) made pursuant to the Freedom of Information Act 2000 (FOIA), Environmental Information Regulations 2004 (EIR) and the Subject Access provisions of the General Data Protection Regulation (GDPR)/Data Protection Act 2018 (DPA).
• Logging, considering and responding to requests from individuals to exercise the Individual Rights provisions of the General Data Protection Regulation (GDPR)/Data Protection Act 2018 (DPA) including requests for Erasure and Restriction of processing.
• Support the wider data protection team in recording, monitoring, and assessing personal data breaches, including ensuring required information is documented in a thorough and timely manner. Support the investigation into data breaches and implementation/co-ordination of mitigations.
• Support team audit and assurance activities to ensure that the agency is meeting its information access and data protection obligations, including assisting with management of the Data Protection Risk register, monitoring and assisting the business deliver mitigations identified.

For further information on the role, please read the role profile.Please note that the role profile is for information purposes only - whilst all elements are relevant to the role, they may not all be assessed during the recruitment process. This job advert will detail exactly what will be assessed during the recruitment process.

Person specification

Required experience:

To be successful in this role you will need to have the following experience:

• Understanding of the Freedom of Information Act 2000, Environmental Information Regulations 2004, the subject access provisions under UK GDPR/ DPA and the exemptions and application of those requirements.
• Passed or studying for Freedom of Information Practitioner Certificate or have sufficient prior experience and knowledge to undertake this soon after starting the role.
• Previous experience of working within an information access, legal, customer service or compliance team.
• Excellent communication skills, both verbal and written, skilled in the delivery and absorption of information with colleagues at all levels.

Additional Information

Operational Delivery Profession (ODP) is the largest and most diverse professional community across the Civil Service. Many of us will have an association with several professional communities or specialisms, ODP applies to all public facing roles / or a role that is primarily aligned to supporting the work of those with public facing roles. All critical to the delivery of UK public services.

Working hours, office attendance and travel requirements

Full time roles consist of 37 hours per week.

Whilst we welcome applications from those looking to work with us on a part time basis, there is a business requirement for the successful candidate to be able to work at least 30 hours per week.

This role is suitable for hybrid working, which is a non-contractual arrangement where a combination of workplace and home-based working can be accommodated subject to business requirements.

The expectation at present is a minimum of 60% of your working time a month will be spent at either your designated workplace (one of the locations cited in the advert) or, when required for business reasons, in another office/work location/visiting stakeholders. Your designated workplace will be your contractual place of work. There may be occasions where you are required to attend above the minimum expectation.

Occasional travel to other offices will be required, which may involve overnight stays.

If you have a question about hybrid working, part time/job share hours, flexible working, travelling for work, or require a reasonable adjustment, please contact the Vacancy Holder during the recruitment process to avoid possible disappointment later in the process should your working arrangements not be compatible with the requirements of the role (see below for contact details).

Visa Sponsorship

Please note that we will only offer sponsorship for a skilled worker visa where a role has been deemed to be business critical. This role does not meet that category, and we will not sponsor a visa. Therefore, this role is not open to applications from those who require sponsorship – candidates must ensure they have the appropriate right to work in the UK before applying. Should you apply for this role and be found to require sponsorship, your application will be rejected and any provisional offer of employment withdrawn.

Behaviou