数据保护官
数据保护官（DPO）独立监督组织对数据保护法的遵守情况，就其义务提供建议，并担任监管机构以及组织所持有其数据的人的联系人。在数字医疗卫生组织中，DPO 就产品、分析、研究和数据共享中合法、公平、透明地使用健康数据提供专家建议。
本文由人工智能助手从英文翻译而来，尚未经过母语人士审校。引自英国政府数字与数据专业能力框架（UK GDaD PCF）和 ESCO 的内容保留英文原文。
- 职族
- 信息治理
- UK GDaD PCF 角色
- 无：本参考资料定义该角色
- ESCO 职业
- data protection officer (ISCO-08 2619)
级别
| 职级 | 角色级别 | UK GDaD PCF 级别 | 英国公务员职等 | 岗位评估分数 |
|---|---|---|---|---|
| 8a | 副数据保护官 | — | — | 560 |
| 8b | 数据保护官 | — | — | 593 |
| 8c | 高级数据保护官 | — | — | 644 |
在数字医疗卫生组织中
- 数据保护法赋予 DPO 受保护的独立地位，直接向最高管理层报告，因此该岗位必须不存在利益冲突。
- 数据保护法对健康数据给予额外保护，其中许多数据还受保密义务约束，因此 DPO 就二者提供建议。
- 大规模处理健康数据、数据关联和人工智能往往需要数据保护影响评估，有时还需要事先咨询监管机构。
- 患者和公众期望透明，因此 DPO 帮助组织清楚地解释其如何使用他们的数据。
ESCO 职业与技能
ESCO 列出了雇主对每种职业通常需要（必备）或可能需要（可选）的技能和知识。可将其用作发展谈话的检查清单。
data protection officer
Data protection officers ensure that the processing of personal data in an organisation is compliant with data protection standards and with the obligations set out in the applicable legislation such as GDPR. They elaborate and implement the organisation policy related to data protection, are responsible for data protection impact assessments and handle complaints and requests from third parties and regulatory agencies. Data protection officers lead investigations into potential data breaches, conduct internal audits and act as point of contact within the organisation on any matters related to the processing of personal data. Data protection officers may develop training programmes and provide training to other employees on data protection procedures.
必备技能和知识（33）
技能与能力
- advise on government policy compliance
- apply information security policies
- cooperate with colleagues
- define organisational standards
- develop information security strategy
- develop organisational policies
- develop training programmes
- ensure compliance with legal requirements
- ensure information privacy
- identify legal requirements
- implement ICT security policies
- keep up-to-date with regulations
- manage data for legal matters
- monitor legislation developments
- protect personal data and privacy
- provide legal advice
- respect data protection principles
- respond to enquiries
- train employees
- use consulting techniques
知识
可选技能和知识（16）
技能与能力
- address identified risks
- analyse legal enforceability
- apply system organisational policies
- assist with litigation matters
- conduct impact evaluation of ICT processes on business
- document project progress
- estimate impact of risks
- maintain internal communication systems
- manage digital identity
- manage keys for data protection
- perform data cleansing
- perform project management
- support managers
- write work-related reports
知识
Contains ESCO v1.2.1 data (https://esco.ec.europa.eu/). © European Union. Reuse authorised under Commission Decision 2011/833/EU.