Head of Information Rights Unit

The Welsh Government operates name-free recruitment. The recruiting panel will not see personal information such as a candidate’s name and address during the sifting process. This policy is in line with our commitment to end bias and promote equality and diversity.

Head of Information Rights Unit

15/10/2026, 16:00

Advertising basis Permanent

Salary range or pay band SEO £47,675 to £56,445

Work pattern Full time (applications are welcome from people who work part time, as part of a job share or who work full time)

Group Operational Effectiveness Group

Directorate Digital, Data and Technology

Branch Information Rights Unit

Location (s) Pan Wales

‘Pan Wales’ means the post holder can be based in any Welsh Government office, subject to business needs. Roles based outside Wales, including London, are not available unless explicitly stated in the advert.

A list of the Welsh Government’s offices can be found on (Use the "Apply for this Job" box below). Please note it may not always be possible to accommodate a preference for a specific office location.

The post holder’s travel from their home to their assigned Welsh Government office is considered their ‘ordinary commute’ and must be done in their own time and at their own cost.

Data and Geography Division sits within Digital, Data and Technology (DDaT) and plays a central role in enabling Welsh Government to use data, information and geographic evidence well. The division provides specialist leadership on data, geography, information rights, information governance and related professional standards. It works across Welsh Government and with partners to ensure that data and geographic information are managed, shared, protected and used responsibly, helping the organisation make better decisions for the people of Wales.

The role is the Head of the Welsh Government’s Information Rights Unit (IRU). The work of the unit is to ensure the Welsh Government meets its obligations and responsibilities as set out in the Information Rights and Data Protection legislation, specifically:

• The Data Protection Act 2018 (DPA)
• The UK General Data Protection Regulation 2018 (UK GDPR)
• The Data Use and Access Act 2025 (DUAA)
• The Freedom of Information Act 2000 (FOIA)
• The Environmental Information Regulations 2004 (EIR)
• The Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR)

This role is part of the Government Knowledge and Information Management (GKIM) profession. The profession brings together specialists who support the effective management, protection and use of information across Government.

As a Data Protection Practitioner, you will apply specialist knowledge to help Welsh Government understand and meet its legal obligations, manage privacy risks and maintain public trust. The role requires practical application of data protection expertise across operational, policy and governance contexts.

The role requires a thorough understanding of the Acts legal obligations as they apply to the Welsh Government, ensuring they are embedded in the business. The role requires being the primary lead and contact for:

• Drafting policy and guidance on Information Rights and Data Protection legislation
• Providing timely advice and guidance on the data protection legislation as it applies to Welsh Government policy, lawmaking and security
• Providing advice and guidance to officials on the handling of Freedom of Information (FOI) requests
• Providing advice and guidance to help WG teams comply with their statutory obligations under information management legislation and the Code of Practice
• Using expert knowledge of the Data Protection Act (DPA), UK General Data Protection Regulation (GPDR), Privacy and Electronic Communications Regulations…