Data Protection Officer Gwynedd Schools

Company Description

Job Advertisement

Gwynedd Council offers an attractive employment package, for more information please click on the Information Pack.

Gwynedd Council operates internally through the medium of Welsh, and offers all its services bilingually. The applicant will be required to reach the linguistic level noted as one of the essential skills in the Person Specification.

We encourage everyone who applies for a job with Gwynedd Council to submit job applications in Welsh or bilingually.

(Applications submitted in English only or Welsh only will always be treated equally, but we ask applicants to consider carefully what the linguistic requirements of the job in question is and if it would be more appropriate to submit an application in Welsh.)

For further information about this post please contact Helen Mary Parry via e-mail on [email protected]

Application forms are available from Support Service, Gwynedd Council, Council Offices, Caernarfon, LL55 1SH

Tel: 01286 679076

E-Mail: [email protected]

CLOSING DATE: 10:00 AM, 29/09/2026

The Council will request a Disclosure from the Disclosure and Barring Service for the successful candidate.

If you are successful to be short listed for an interview you will be contacted by E-MAIL using the address provided on your application form. You need to ensure that you check your email regularly.

Person Specification

Personal attributes

Essential

• Able to develop and transfer awareness and training to a broad range of audiences.
• Negotiation and persuasive ability.
• Able to work under pressure.
• Able to work on their personal initiative.
• Able to prioritize work.
• Able to interpret complex and specialist legislation.
• Able to work with accuracy and concentrate on detail.

Desirable: –

Qualifications and relevant training

Essential: Degree or equivalent qualification

Desirable

• Possess a relevant professional qualification and membership of an appropriate professional body.
• Evidence of having received training in further development in Information Management and/or Data Protection.

Relevant experience

Essential

• Track record of making presentations and training.
• Track record of preparing policies, procedures and guidelines.
• Experience of dealing with a wide range of audiences and presenting complex information in an easily understandable manner.

Desirable

• Detailed understanding and experience of risk management practice and using it for data protection.
• Track record of preparing and reviewing information sharing agreements.
• Track record of writing agreements.
• Track record of conducting investigations and audits.
• Track record of assessing and monitoring data protection impact assessments.

Skills and specialist knowledge

Essential

• Excellent verbal and written communication skills to be able to present and train others.
• Knowledge of GDPR data protection law and practices.
• A good understanding of information protection protocols and the technologies which support them.

Desirable: A good understanding of modern technology and its use in the workplace, especially record management systems and electronic documents.

Language requirements

Listening and Speaking – Higher Level: Able to follow a conversation or discussion through the medium of Welsh and English on a professional level and discuss general day to day topics in the field in order to present information and express opinions. Able to give a pre-prepared presentation and respond to any comments and questions on it in Welsh or English.

Reading and Understanding – Higher Level: Able to understand standard written Welsh and English; both formal and informal. Able to gather information from various sources such as letters, reports, articles through the medium of Welsh and English in order to fulfil the post.

Writing – Higher Level: Present written information confidently by letter, more detailed and technical report formats, and respond to written requests conveying information, ideas and opinion in Welsh and English (help is available to check the work).

Job Description

Purpose of the Post

• Ensure that the people of Gwynedd are at the heart of everything we do.
• Leading a programme for achieving data protection compliance across all Gwynedd schools.
• Fulfilling the statutory role of Data Protection Officer as defined in the UK Data Protection Regulation.

Main Duties

• Providing guidance and advice for schools and their employees on their obligations pursuant to the UK General Data Protection Regulation (UK GDPR) and other relevant data protection legislation.
• Conducting training sessions and face to face awareness raising sessions for head teachers, school employees and governors on the compliance requirements of UK GDPR.
• Conducting school audits and monitoring compliance with UK GDPR and other relevant data protection legislation.
• Providing specialist advice as regards Data Protection Impact Assessments and monitoring their performance.
• Cooperating with, and acting as the contact point for, the Information Commissioner’s Office.
• Assessing and managing the risk associated with processing operations, taking into account the nature, scope, context and purposes of processing.
• Providing advice and responding to requests in relation to rights to access information and other rights available under UK GDPR.
• Leading and providing specialist advice to schools on data events and complaints.
• Preparing policies, procedures, guidance and templates to assist compliance with data protection legislation.
• Promoting and facilitating data sharing agreements under the provisions of the Wales Data Sharing Agreement.
• Leading and providing advice on co-ordinating information requests from external organisations including the police.
• Collaborating with the Council’s executive officer and SPOC on the use of closed-circuit television cameras in schools.
• Possessing the latest information on legislative developments.
• Auditing data records / register of all categories of processing events undertaken in the school or on behalf of the School.
• Providing specialist advice on preparing and reviewing information sharing agreements.
• May also fulfil other tasks and duties which do not result in a conflict of interests.
• Responsibility for self-development.
• Ensure compliance with Health and Safety rules in the workplace in accordance with the responsibilities noted in the Health and Safety at Work Act 1974 and the Council’s Health and Safety Policy.
• Operate within the Council’s policies in relation to equal opportunities and equality.
• Responsible for managing information in accordance with the Council’s information management guidelines. Ensure that personal information is treated in accordance with Data Protection legislation.
• Commitment to reducing the Council’s carbon emissions in accordance with the Carbon Management Plan, and to encourage others to act positively towards reducing the Council’s Carbon Footprint.
• Undertake any other reasonable duty which corresponds to the salary level and responsibility level of the job.
• Responsibility to report any concern or suspicion that a child or vulnerable adult is being abused.

Special Circumstances

• There may be occasional need for evening work e.g. school meetings and governor meetings / training.