Data Protection Officer

Data protection is a booming industry as the GDPR requires all public bodies and certain other organisations to appoint a data protection officer.

Data protection officers are responsible for all aspects of an organisation’s compliance with data protection law, including defining and implementing internal policies and procedures for acquisition, storage, retention and disposal of data and overall data protection strategy. They are also expected to advise and train other staff on relevant data protection law.

Depending on the organisation structure and level of seniority, a DPO might also have some responsibility for information security.

Qualifications and experience

Data protection officers need a thorough and current knowledge of UK, EU and relevant international legislation (including GDPR, of course). Entry level positions in these roles do exist, but most people come into one of these roles from a records or information management background.

Related roles

Information rights managers

Information governance managers

Relevant Special Interest Groups

Knowledge & Information Management Group

Commercial, Legal & Scientific Information Group

UK Electronic Information Group