Data Protection Officer

Welsh Ambulance Service University NHS Trust

About The Position

The Data Protection Officer (DPO) will serve as the Trust’s subject matter expert on all data protection matters, acting as the recognized Trust authority and advisor on these issues, prioritizing the interests of data subjects. This role is crucial for ensuring the Trust's compliance with the General Data Protection Regulations (GDPR), Data Protection Act 2018, and Network & Information Systems Regulations. The DPO will operate with autonomy, applying their interpretation of regulations to lead the Trust's data protection initiatives and manage the Information Governance agenda in alignment with the Trust’s business and service objectives. This position is key to driving the strategic development of Information Governance across complex clinical and corporate services.

Requirements

  • Subject matter expert on all aspects of data protection.
  • Recognized Trust authority and advisor on data protection matters.
  • Ensures Trust compliance with GDPR, Data Protection Act 2018, and NIS Regulations.
  • Works with autonomy and uses own interpretation of regulations.
  • Provides leadership on data protection matters.
  • Manages and delivers the Information Governance agenda.
  • Supports the Trust’s business and service objectives.
  • Drives strategic development of Information Governance across complex clinical and corporate services.
  • Ability to provide specialist expert advice to the SIRO and Caldicott Guardian.
  • Ability to act as Trust representative in NHS Wales forums on Data Protection and Information Governance.
  • Ability to lead in relevant internal and external working groups/projects, services and initiatives.
  • Ability to attend local, regional and national forums within the Health community.
  • Ability to liaise directly with the Information Commissioner’s Office.
  • Ability to analyze stakeholder utilization of information for compliance.
  • Ability to undertake Information Risk Assessment.
  • Ability to monitor Information Security incident forms.
  • Ability to investigate and resolve complex breaches in security and confidentiality.
  • Ability to develop appropriate reports.
  • Ability to develop and support an auditable structure and systems for Data Protection management.
  • Experience in recruitment and line management.
  • Experience in managing CPD, attendance, grievances, disciplinary hearings, appraisals, and performance.
  • Must provide full contact details for all referees, including email addresses where possible.
  • Non UK / RoI candidates wishing to apply should self-assess the likelihood of obtaining a Certificate of Sponsorship.

Nice To Haves

  • Ability to speak Welsh is desirable.

Responsibilities

  • Providing specialist expert advice to the SIRO and Caldicott Guardian to ensure the Trust operates within legal and ethical frameworks.
  • Acting as the Trust representative in NHS Wales forums on Data Protection and Information Governance.
  • Leading internal and external working groups, projects, services, and initiatives, providing expert advice on information governance and data protection.
  • Attending local, regional, and national forums within the Health community to ensure the delivery of Information Governance across all organizations.
  • Liaising directly with the Information Commissioner’s Office regarding appeals, complaints, and reviews submitted by the public.
  • Analyzing how internal and external stakeholders utilize information to assess compliance with statutory data protection and information governance regulations.
  • Undertaking Information Risk Assessments, monitoring Information Security incident forms, investigating and resolving complex breaches in security and confidentiality, identifying areas for improvement, and developing appropriate reports.
  • Developing and supporting an auditable structure and systems for Data Protection management within the Trust.
  • Recruiting and managing the Information Governance Team, including encouraging Continuing Professional Development (CPD), managing attendance, grievances, disciplinary hearings, appraisals, and performance.

Benefits

  • Starting at the bottom of the band for the position applied for, but can apply for a higher salary if they have previous experience relevant to the position.
© 2026 Teal Labs, Inc
Privacy PolicyTerms of Service