Head of Information Governance

The Head of Information Governance / Data Protection Officer provides corporate strategic leadership, statutory accountability, and professional authority for Information Governance, data protection, and data security across the Norfolk and Waveney Acute Hospitals Collaborative.

The postholder is the organisation’s designated Data Protection Officer (DPO) under UK GDPR and the Data Protection Act 2018 and operates independently in this statutory capacity. The role holds corporate responsibility for ensuring the lawful, fair, and transparent processing of personal data, including highly sensitive health information, across multiple Acute Trusts.

The postholder provides authoritative advice and assurance to Trust Boards, Executive Directors, Caldicott Guardians, Senior Information Risk Owners (SIROs), and system partners, ensuring that robust governance frameworks are embedded across digital transformation, clinical services, research activity, and corporate functions.

The role carries significant corporate accountability for safeguarding patient, staff, and organisational information assets. Misinterpretation, governance failure, or non-compliance at this level could result in regulatory enforcement action, substantial financial penalties, service disruption, reputational damage, loss of public trust, and patient harm.

Lead the development and implementation of the Collaborative’s Information Governance and Data Protection Strategy, ensuring alignment with NHS policy, national legislation, ICS objectives, and digital transformation priorities.

Act as the statutory Data Protection Officer, providing independent oversight and advice regarding compliance with UK GDPR, Data Protection Act 2018, PECR, Caldicott Principles, and NHS information governance standards.

Provide authoritative and independent advice on complex data protection matters, including lawful basis for processing, special category data, information sharing agreements, cross-border data transfers, research governance, and system-level data integration.

The newly formed Norfolk &​ Waveney University Hospitals Group (NWUHG) is placing people and culture at the heart of its transformation.

By working as one system, the Group is strengthening workforce development, improving staff experience and creating consistent, supportive leadership across all three hospitals. This unified approach enables better training, enhanced well-being support, and a stronger culture rooted in compassion, flexibility and continuous learning.

Focusing on people also supports national priorities - ensuring the workforce is skilled, adaptable and ready for the future models of care - and strengthens NWUHG's overall performance by improving qualify, resilience and sustainability.

Together, this creates a Groupwide commitment to making NWUHG a great place to work, with clear benefits for staff including:

Flexible working hours

Fast Track Staff Physiotherapy Service

Multi Faith prayer room at NNUH Colney Lane site

Discounted Gym memberships

Generous pension scheme and annual leave entitlement

Wagestream - access up to 40% of your pay as you earn it

Free Park &​ Ride service direct to NNUH Colney Lane site

Free 24 hour confidential counselling support

On-site Nursery at NNUH Colney Lane

On-site cafes offering staff discounts at NNUH Colney Lane

Support in career development

Flexible staff bank

Salary sacrifice schemes including lease cars, Cycle to Work scheme and home electronics

For further details / informal visits contact: Name: Ed Prosser-Snelling Job title: Group Director of Digital Email address: ed.prosser-snelling@nnuh.nhs.uk