Information Rights Officer | East London NHS Foundation Trust
| Posting date: | 25 May 2026 |
|---|---|
| Salary: | Not specified |
| Additional salary information: | £34,186 - £37,389 Per annum |
| Hours: | Full time |
| Closing date: | 08 July 2026 |
| Location: | London, E1 8DE |
| Company: | East London NHS Foundation Trust |
| Job type: | Permanent |
| Job reference: | 7992716/363-CP7992716 |
Summary
Our Information Rights Officers process subject access requests to tight timescales under various legislation. We are looking for an individual who is well organised, has excellent Office skills and has a working knowledge of the the UK GDPR, Data Protection Act and other relevant legislation. If you are a good communicator, have
the ability to explain things clearly to a wide variety of different audiences with different levels of understanding, can remain calm at all times and work effectively to challenging timescales, then this may be the job for you.
The post holder is a point of contact across the Trust for individuals seeking personal information under data protection and related legislation. You will manage a portfolio of your own subject access requests and will support processes for obtaining archived records. The post holder will also on occasion support Freedom of Information processes.
Our mission is to make a positive difference to people's lives by improving the quality of life for all we serve. Our values are: We Care, We Respect, We are Inclusive – so we are looking for people who live and breathe these qualities when supporting service users and carers, and in their relationships with colleagues in the Trust and our partner organisations.
Be a point of contact across the Trust when individuals or their representatives seek access to their personal information
Provide basic advice and assistance to requesters or their representatives seeking access to their personal information
Liaise and correspond with data subjects and their representatives, ensuring they are kept up to date at all times and that their requests are satisfied within relevant timescales. This may include contact in a hostile environment when data subjects are distressed, unwell or have made a complaint
Acknowledge requests, liaising with the requester where necessary to ensure the correct documentation has been received including consent, identification and authority
Interrogate clinical and other systems to identify requested information
Liaise with other teams including the electronic clinical systems help desk, complaints, incidents and legal affairs teams as necessary to ensure all requested information is available
Liaise with archiving and off site storage providers to obtain inactive records required as part of a disclosure, ensuring that scan on demand copies are scrutinised and added to the service user’s electronic clinical record to relevant technical standards
Undertake redaction of third party and other information, working closely with the responsible clinician to ensure each disclosure is individually appropriate
Provide basic advice to locality teams on the principles of disclosure for access to records requests to facilitate timely and appropriate responses to requests
Ensure that archived records are obtained in an electronic format in an appropriate and timely way, using good organisation skills to minimise any budgetary impact. This is likely to include liaison with locality leads, local administrative staff and archiving providers
When requested undertake basic FOI duties including logging and acknowledging requests, uploading anonymised responses to the website etc
Support the team when required to undertake routine compilation of responses which may require extracting information from databases and spreadsheets
Process requests which may have tight and differing deadlines from data subjects, police, solicitors, the courts and any other statutory organisations
On allocation of an access to records request, be responsible for the end to end process associated with processing the request from initial scrutiny and verification of documentation to the final disclosure
Maintain an up to date basic knowledge of data protection legislation permitting access to personal information and their related statutory changes and initiatives
Scrutinise received scan on demand records for pagination, formatting and identity prior to uploading to the relevant electronic clinical record to relevant technical standards
Confirm with the archiving provider once a scanned record has been accepted to ensure archiving catalogues are amended as appropriate and destruction certificates obtained
Liaise with relevant clinical teams when another individual’s information is identified within a scanned record to ensure it is subsequently filed with the correct records
Participate in annual audits with archiving providers to ensure the requirements of the Data Security & Protection Toolkit are met
Help coordinate the annual and ongoing review, retain or delete process for records that have reached the end of their retention period, ensuring that processes are followed, reports taken to the relevant internal committees and destruction certificates obtained
This advert closes on Wednesday 24 Jun 2026