Information governance officer
Information governance staff help the organization handle personal and health information lawfully, securely, and ethically. They advise teams on data protection and confidentiality, handle information rights requests, support data protection impact assessments, manage data breaches, and gather the evidence that shows the organization meets information governance standards.
- Family
- Information governance
- UK GDaD PCF role
- None: this reference defines the role
- ESCO occupations
- data protection officer (ISCO-08 2619); document management officer (ISCO-08 1349)
- On GitHub
- Role document · Role data
Levels
| Band | Role level | UK GDaD PCF level | Civil Service grades | Job evaluation points |
|---|---|---|---|---|
| 4 | Information governance officer | — | — | 302 |
| 5 | Senior information governance officer | — | — | 364 |
| 6 | Information governance lead | — | — | 434 |
| 7 | Information governance manager | — | — | 490 |
| 8a | Head of information governance | — | — | 560 |
In a digital health care organization
- Data protection law gives health information extra protection, so the bar for lawful use, security, and transparency is high.
- Digital health services often share data across many care organizations, so information sharing agreements and data flows need careful review.
- Patients and the public have legal rights to access their records and the organization's information, with strict time limits.
- Data breaches involving health information can cause real harm and distress, so incidents need fast, careful handling.
- New uses of data, such as analytics, research, and AI, raise questions of consent, confidentiality, and public trust.
ESCO occupations and skills
ESCO lists the skills and knowledge that employers usually need (essential) or may need (optional) for each occupation. Use them as a checklist for development conversations.
data protection officer
Data protection officers ensure that the processing of personal data in an organisation is compliant with data protection standards and with the obligations set out in the applicable legislation such as GDPR. They elaborate and implement the organisation policy related to data protection, are responsible for data protection impact assessments and handle complaints and requests from third parties and regulatory agencies. Data protection officers lead investigations into potential data breaches, conduct internal audits and act as point of contact within the organisation on any matters related to the processing of personal data. Data protection officers may develop training programmes and provide training to other employees on data protection procedures.
Essential skills and knowledge (33)
Skills and competences
- advise on government policy compliance
- apply information security policies
- cooperate with colleagues
- define organisational standards
- develop information security strategy
- develop organisational policies
- develop training programmes
- ensure compliance with legal requirements
- ensure information privacy
- identify legal requirements
- implement ICT security policies
- keep up-to-date with regulations
- manage data for legal matters
- monitor legislation developments
- protect personal data and privacy
- provide legal advice
- respect data protection principles
- respond to enquiries
- train employees
- use consulting techniques
Knowledge
Optional skills and knowledge (16)
Skills and competences
- address identified risks
- analyse legal enforceability
- apply system organisational policies
- assist with litigation matters
- conduct impact evaluation of ICT processes on business
- document project progress
- estimate impact of risks
- maintain internal communication systems
- manage digital identity
- manage keys for data protection
- perform data cleansing
- perform project management
- support managers
- write work-related reports
Knowledge
document management officer
Document management officers ensure that the documents required for their organisation's functioning and daily operations are registered, classified and archived correctly and are made available to the different services or to the public upon request. They oversee the implementation of internal procedures and promote proper document management practices within the organisation, providing training to other employees on document management procedures. They may operate electronic records management systems (ERMS), electronic document management systems (EDMS) and archives management systems (AMS) and provide support in defining related technical requirements.
Essential skills and knowledge (34)
Skills and competences
- analyse business processes
- apply information security policies
- apply organisational techniques
- develop classification systems
- develop organisational policies
- ensure proper document management
- facilitate access to information
- manage archive
- manage content metadata
- manage data collection systems
- manage digital archives
- monitor developments in field of expertise
- organise information
- oversee record management
- respect data protection principles
- set up documentation control system
- train employees
- use software for data preservation
- work in an international environment
Knowledge
- ICT infrastructure
- access to documents regulations
- business process modelling
- data protection
- database management systems
- digitization
- document management
- document sharing procedures
- documentation types
- government policy implementation
- information architecture
- information categorisation
- information confidentiality
- intellectual property law
- internal risk management policy
Optional skills and knowledge (26)
Skills and competences
- appraise historical documents
- assess reliability of data
- communicate with stakeholders
- develop information standards
- digitise documents
- draft tender documentation
- ensure compliance with legal requirements
- ensure information transparency
- evaluate tender
- file documents
- maintain computer hardware
- monitor legislation developments
- operate relational database management system
- perform data analysis
- propose ICT solutions to business problems
- provide cost benefit analysis reports
- utilise machine learning
Knowledge
Contains ESCO v1.2.1 data (https://esco.ec.europa.eu/). © European Union. Reuse authorised under Commission Decision 2011/833/EU.