Skill description
Implementing and promoting compliance with information and data management legislation.
Guidance notes
Includes legislation regulating the holding, use and disclosure of personal data.
Activities may include, but are not limited to:
- providing expert advice on policies, procedures and governance.
- designing privacy-friendly products, services and systems that respect customer privacy and embed data protection.
- performing impact assessments, identify risks whilst enabling prudent use of data and addressing issues with products and services.
- responding to incidents.
- following legislative developments.
- creating risk models and frameworks.
- working with subject matter experts in areas such as, but not limited to, legal, public relations, learning and development, procurement, security, data management and architecture.
Level 4Enable
Supports the implementation of policy, standards and guidelines related to information and data legislation and compliance requirements.
Monitors the implementation of effective controls for internal delegation, audit and control relating to information management.
Reports on the consolidated status of information controls to inform effective decision-making.
Identifies risks around the use of information and data that is subject to specific legislation.
Recommends remediation actions as required.
Level 5Ensure, advise
Contributes to policies, standards and guidelines for information and data compliance.
Provides authoritative advice on implementing compliance controls in products, services and systems.
Investigates breaches and recommends control improvements.
Maintains an inventory of legislated data, conducts risk assessments and specifies necessary changes.
Ensures formal requests and complaints are handled following procedures.
Prepares and submits reports to relevant authorities, ensuring all compliance requirements are met.
Level 6Initiate, influence
Develops strategies for compliance with information and data legislation.
Ensures that the policy and standards for compliance with information and data legislation are fit for purpose, current and correctly implemented.
Acts as the organisation's contact for the regulatory authorities.
Operates as a focus for information and data legislation for the organisation, working with specialists to provide authoritative advice and guidance.
No notes added yet.
Comments
0 comments
Please sign in to leave a comment.