Barnsley Healthcare Federation is looking for a Data Protection Practitioner. This is a brand new role within the Federation working 37.5 hours per week on a 12 month fixed term contract.
As a Data Protection Practitioner at BHF, you will play a key role in delivering high quality data protection services to our clients. You will provide expert advice, support operational teams, manage data protection and information governance processes, and help embed strong data protection practices across diverse environments.
This is an excellent opportunity for someone who enjoys problem solving, working collaboratively, and applying legislation in a practical, real world context.
BHF are fully committed to ensuring equality, diversity, and inclusion (EDI) as this is embedded in our values. We are also a committed employer under the Disability Confident Scheme. Therefore, should you wish to discuss any reasonable adjustments or assistance you might need in the application or interview process, please contact a member of the HR team at syicb-barnsley.bhf-hrteam@nhs.net and we will be happy to help.
Job responsibilities
Provide expert advice on UK GDPR, the Data Protection Act 2018, and information governance best practice to BHF clients.
Support DPIAs by identifying risks, documenting findings, and recommending mitigations.
Manage Subject Access Requests (SARs) and other information rights requests within statutory timescales.
Oversee and support the management of incidents and breaches, including investigation, risk assessment, escalation, and reporting.
Assist with the handling of complaints ensuring timely and appropriate resolution.
Support audit activity, compliance monitoring, and continuous improvement initiatives.
Deliver training, workshops, and awareness sessions to promote strong DP/IG culture across client organisations.
Respond to data protection and information governance queries from internal and external stakeholders as well as the public.
Provide confidential minute taking for sensitive meetings where required. Maintain accurate documentation, logs, and evidence to support compliance and audit readiness.
Contribute to the development and review of data protection impact assessments, data security protection toolkit, policies, procedures, and guidance materials.
Work collaboratively with client operational teams, clinical staff, and corporate services to embed good data protection practice.
About us
Barnsley Healthcare Federation is a specialist provider of information governance and data protection support, working with organisations across healthcare, public services, and regulated environments. We help our clients navigate the complexities of UK GDPR, the Data Protection Act 2018, and wider information governance frameworks with clarity, confidence, and practical expertise.
Our mission is simple: to strengthen data protection culture, reduce organisational risk, and ensure our clients can operate safely, compliantly, and efficiently. We pride ourselves on delivering high quality, tailored support that blends technical knowledge with a collaborative, people focused approach.
Joining Barnsley Healthcare Federation means becoming part of a growing, forward thinking organisation that values professionalism, integrity, and continuous improvement. You will work alongside an experienced DP/IG specialist and contribute to meaningful work that protects people, organisations, and sensitive information every day.
Person Specification
Experience
* Strong working knowledge of UK GDPR and the Data Protection Act 2018.
* Experience in healthcare, NHS, or primary care environments.
* Experience managing SARs, DPIAs, incidents, breaches, or compliance processes.
* Understanding of confidentiality, Caldicott Principles, and information security best practice.
* Experience supporting staff engagement, training, or awareness activities.
* Evidence of continuous professional development.
* Formal qualification in data protection or information governance.
* Experience supporting audits or regulatory inspections.
* Experience working with NHS IG frameworks – DSPT, IG Toolkit.
* Experience delivering training or awareness sessions.
Disclosure and Barring Service Check
This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.
J-18808-Ljbffr