About this role
Job summary
Barnsley Healthcare Federation is looking for a Data Protection Practitioner. This is a brand new role within the Federation working 37.5 hours per week on a 12 month fixed term contract.
As a Data Protection Practitioner at BHF, you will play a key role in delivering high quality data protection services to our clients. You will provide expert advice, support operational teams, manage data protection and information governance processes, and help embed strong data protection practices across diverse environments.
This is an excellent opportunity for someone who enjoys problem solving, working collaboratively, and applying legislation in a practical, real world context.
BHF are fully committed to ensuring equality, diversity, and inclusion (EDI) as this is embedded in our values. We are also a committed employer under the Disability Confident Scheme. Therefore, should you wish to discuss any reasonable adjustments or assistance you might need in the application or interview process, please contact a member of the HR team at [email protected] and we will be happy to help/
Please note that interviews may take place prior to the advert closing as and when suitable applications are received. If a suitable candidate is appointed the role may close early, therefore please do not hesitate to submit your application.
Main duties of the job
Provide daytoday advice and guidance on UK GDPR, the Data Protection Act 2018, and information governance best practice.
Support teams with Data Protection Impact Assessments, ensuring risks are identified, documented, and mitigated.
Manage and support the handling of Subject Access Requests and other information rights requests within statutory timescales.
Oversee and manage incidents and breaches, including investigation, risk assessment, escalation, and reporting where required.
Support the management and response of complaints and incidents, ensuring timely and appropriate resolution.
Assist with audit activity, monitoring of action plans, and delivery of continuous improvement initiatives.
Contribute to compliance monitoring activities and organisational reporting requirements.
Support and deliver staff engagement, training, and awareness programmes to promote good information governance practice.
Provide assistance with data protection and information governance queries and requests for information from internal and external stakeholders and the public.
Provide confidential minute taking support for sensitive meetings where required.
Work collaboratively with operational teams, clinical staff, and corporate services to embed good data protection practice.
Maintain accurate documentation, logs, and evidence to support compliance and audit readiness.
Support the development and review of policies, procedures, and guidance materials.
About us
Barnsley Healthcare Federation is a specialist provider of information governance and data protection support, working with organisations across healthcare, public services, and regulated environments. We help our clients navigate the complexities of UK GDPR, the Data Protection Act 2018, and wider information governance frameworks with clarity, confidence, and practical expertise.
Our mission is simple: to strengthen data protection culture, reduce organisational risk, and ensure our clients can operate safely, compliantly, and efficiently. We pride ourselves on delivering high quality, tailored support that blends technical knowledge with a collaborative, people focused approach.
Joining Barnsley Healthcare Federation means becoming part of a growing, forward thinking organisation that values professionalism, integrity, and continuous improvement. You will work alongside an experienced DP/IG specialist and contribute to meaningful work that protects people, organisations, and sensitive information every day.
Job description Job responsibilities
As a Data Protection Practitioner at BHF, you will play a key role in delivering high quality data protection services to our clients. You will provide expert advice, support operational teams, manage data protection and information governance processes, and help embed strong data protection practices across diverse environments.
This is an excellent opportunity for someone who enjoys problem solving, working collaboratively, and applying legislation in a practical, real world context.
Key Responsibilities
Provideexpert advice on UK GDPR, the Data Protection Act 2018, and information governance best practice to BHF clients.
Support DPIAs by identifying risks, documenting findings, and recommending mitigations.
ManageSubject Access Requests (SARs) and other information rights requests within statutory timescales.
Oversee and support the management of incidents and breaches, including investigation, risk assessment, escalation, and reporting.
Assist with the handling of complaints ensuring timely and appropriate resolution.
Support audit activity, compliance monitoring, and continuous improvement initiatives.
Deliver training, workshops, and awareness sessions to promote strong DP/IG culture across client organisations.
Respond to data protection and information governance queries from internal and external stakeholders as well as the public.
Provide confidential minute taking for sensitive meetings where required. Maintain accurate documentation, logs, and evidence to support compliance and audit readiness.
Contribute to the development and review of data protection impact assessments, data security protection toolkit, policies, procedures, and guidance materials.
Work collaboratively with client operational teams, clinical staff, and corporate services to embed good data protection practice
Person Specification
Experience Essential
Strong working knowledge of UK GDPR and the Data Protection Act 2018. Experience in healthcare, NHS, or primary care environments. Experience managing SARs, DPIAs, incidents, breaches, or compliance processes. Understanding of confidentiality, Caldicott Principles, and information security best practice. Experience supporting staff engagement, training, or awareness activities. Evidence of continuous professional development.
Desirable
Formal qualification in data protection or information governance. Experience supporting audits or regulatory inspections. Experience working with NHS IG frameworks - DSPT, IG Toolkit. Experience delivering training or awareness sessions.
Disclosure and Barring Service Check This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.
Employer details Employer name Barnsley Healthcare Federation
Address BHF Priory Centre
Pontefract Road
Barnsley
South Yorkshire
S71 5PN
United Kingdom
Employer's website https://barnsleyhealthcarefederation.co.uk/ (Opens in a new tab)