Data protection advisor

The Commissioner and management board have determined that the Met will be a data driven organisation. This means treating our data in the same way we treat our people, methods, and technology, as a strategic asset.

The data office is the single place of accountability across the Met that:

• owns and drives the data compliance and analytics agenda
• brings together the accountabilities that are currently dispersed across the Met business areas
• consolidates and further develops existing Met data and insight services
• enables data sharing and collaboration to serve the public and external partners

Job purpose

The Data Protection Team (DPT) is the central unit for Met-wide data protection advice and assurance, to ensure our organisational compliance with the Data Protection Act (2018) and United Kingdom General Data Protection Regulations (2018). The DPT are subject matter experts in relation to both legislations and serve the organisation by translating both Acts into practicable guidance and documentation for frontline and wider use.

As specialists, the DPT are responsible for ensuring compliance with the principles of both Acts and largely do so through supporting business areas completing Data Protection Impact Assessments (DPIAs) and Data Sharing Agreements (DSAs).

The DPT provide further specialist support for the completion of Appropriate Policy Documents (APDs), the development of Data Processing Contracts (DPCs) and other standard frameworks the wider organisation use to formalise their data assurance around the processing of personal data. The DPT police the review of such arrangements and the establishment of new ones.

The DPT support a critical part of data governance and assurance for the organisation. Our support and responsibilities align with the objectives of the New Met for London (NMfL) initiative that seeks to better shape policing priorities, become a data-driven organisation and achieve 'more trust, less crime and high standards' for London.

Key role responsibilities

• manage compliance with statutory requirements imposed by the Data Protection Act (DPA 2018) and the United Kingdom General Data Protection Regulation (UK-GDPR)
• guide the completion of DPIAs, DSAs, APDs, DPCs and bespoke privacy notices for information asset owners and project authors
• support the creation and frequent review of data protection documentation and toolkits including DSAs, DPCs, DPIAs and any similar documents arising from future legislation
• provide expert guidance on all aspects of law and legislation that govern the use of personal data, and where required, empower and support Met business groups demonstrating their compliance during audits
• assist in data protection training, local and Met-wide
• engage with all functions and directorates to enable effective and compliant management and processing of personal data
• manage expectations of key stakeholders in relation to the development of data protection documentation
• build and maintain working relationships across the organisation to fulfil data protection advisory function
• build and maintain working relationships with key partners, such as National Police Chiefs' Council (NPCC) and the Information Governance for London (IGfL) for effective collaboration
• support the Data Protection Team and wider office of the Data Protection Officer in carrying out the day-to-day activities to ensure compliance with data protection law
• support units within Digital, Data and Technology (DDaT) to ensure our data driven directive is built on a strong, compliant foundation
• support data literacy within the organisation
• keep specialist knowledge up-to-date with changes in legislation, information tribunal decisions, NPCC and Information Commissioner's Office (ICO) guidance
• manage a busy internal enquiries mailbox, that often receives time sensitive matters for assessment and advice
• make an assessment whether a personal data breach meets the threshold for escalation and support with risk mitigation advice
• liaise with Met Legal Services, as required
• assess project and business justification proposals from a data protection perspective to support shaping policing priorities, such as NMfL, as required
• other duties as required

Additional information

Digital, Data and Technology is committed to creating an inclusive working environment. We welcome and encourage applications from candidates who are seeking flexible working arrangements, including part time working, job share or carers and career break returners. We also support blended working and the hiring manager will be happy to discuss arrangements for this role.