Data Protection Officer; Hybrid

An excellent opportunity to join the in-house Governance Team.

We have an exciting opportunity for a Data Protection Officer. This role is responsible for ensuring Methodist Homes (MHA) complies with all relevant data protection and privacy legislation, including the UK General Data Protection Regulations (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations and the Access to Health Records Act 1990. Reporting to the General Counsel/Company Secretary, the Data Protection Officer (DPO) acts as the organisation’s lead expert on data protection, providing advice, guidance, and assurance to managers, employees, and anyone processing personal data on MHA’s behalf.

The role oversees the development, maintenance, and review of information governance policies to ensure that personal information is handled lawfully, securely, and in line with best practice.

The DPO serves as MHA’s central point of contact for data protection matters, including being the primary contact with the Information Commissioner’s Office (ICO). The DPO also liaises with law enforcement agencies, local authorities, the NHS, law firms, and other third parties. The role leads the response to personal data breaches, ensuring incidents are investigated, reported to the ICO where required, corrective actions are implemented, and lessons learned are embedded across the organisation.

The DPO also manages requests from individuals exercising their data protection rights and ensures these are handled promptly and effectively.

A key aspect of the role is monitoring and improving compliance across the organisation. This includes maintaining records required by legislation, conducting regular data protection audits and compliance reviews, managing the annual NHS Data Security and Protection Toolkit (DSPT) submission, and ensuring colleagues complete the required data protection and information governance training. The DPO is also responsible for promoting a culture of privacy by design, providing expert guidance on Data Protection Impact Assessments and Legitimate Interest Assessments, and ensuring high-risk processing activities are appropriately assessed and escalated where necessary.

We are ideally looking for:

• Significant experience in data protection and information governance.
• Expert knowledge of the UK GDPR, Data Protection Act 2018, Privacy and Electronic Communications Regulations (PECR), and Access to Health Records Act 1990.
• A proven track record of maintaining compliance records and evidencing organisational accountability under data protection legislation.
• Experienced in implementing change and influencing organisational culture in response to legislative developments and regulatory guidance from the ICO.
• A highly motivated individual who can work independently.
• A high level of professional integrity, confidentiality, and expertise.
• A flexible attitude to work and a willingness to get stuck in and travel as required to carry out investigations, training, and meetings across MHA locations.
• An effective communicator with the ability to influence, challenge, and build strong stakeholder relationships at all levels of the organisation.
• Excellent IT skills with extensive Microsoft Excel experience.

At MHA we are committed to helping people live later life well. You’ll joining an organisation that values collaboration, respect and continuous improvement, where your contribution will make a meaningful difference to residents and colleagues alike.

Perks of joining the MHA family:

• Values-driven culture - we're super proud of our culture.  to learn more.
• Access to…