Information and data law

Original to this reference.

Levels

1. Awareness

You can:

• explain the basic principles of data protection and confidentiality
• recognise information requests and data breaches and route them correctly

2. Working

You can:

• review data sharing and data processing agreements against templates
• support responses to information requests and data subject rights requests
• explain the lawful bases for using health data in common situations

3. Practitioner

You can:

• advise on data protection, the duty of confidentiality, and information access law for digital services
• draft and negotiate data sharing agreements and data processing terms, including international transfers
• advise on data protection impact assessments for new technology, such as AI and analytics platforms
• advise on data breaches, regulator enquiries, and complaints

4. Expert

You can:

• set the organisation's legal position on the use of health and care data
• lead on high-risk or novel uses of data, such as research, data platforms, and AI
• represent the organisation with regulators on information law

Closest ESCO skills

• protect personal data and privacy (close match)
• ICT security legislation (narrow match)
• observe confidentiality (narrow match)

Contains ESCO v1.2.1 data (https://esco.ec.europa.eu/). © European Union. Reuse authorised under Commission Decision 2011/833/EU.

Role levels that expect this skill