Job Description

28,167.64 Pro Rata (14.60)

The post holder will be responsible for the efficient and effective processing of all information rights requests, with a specific focus on Subject Access Requests (SARs) and requests for access to health records (iGPR). The role ensures the organisation complies with all relevant legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Access to Health Records Act 1990.

Key Responsibilities

Process Information Requests:

Coordinate and manage all incoming SARs and iGPR requests from patients, service users, solicitors, police, and other external agencies.

Identity Verification:

Verify the identity of the requester or third-party representatives to prevent unauthorised data disclosure.

Data Search and Retrieval:

Conduct thorough searches across various electronic and manual systems to locate and collate all relevant personal data.

Review and Redaction:

Review the gathered information, applying relevant exemptions (e.g., third-party data, ongoing investigations) and redacting sensitive data where necessary, ensuring legal compliance.

Response Management:

Compile complete responses in a clear, concise, and accessible format, and ensure they are delivered securely within the statutory one-month timeframe (or extended timeframe for complex cases).

Record Keeping:

Maintain comprehensive and accurate records of all requests, communications, and data disclosed using the organisation's monitoring systems (e.g., Ulysses, specific IG software).

Guidance and Support:

Act as a point of contact for staff, providing advice and guidance on the access request process and broader Information Governance matters.

Policy Compliance:

Ensure all processing activities adhere to the organisation's Information Governance policies and procedures.

Issue Escalation:

Promptly escalate any complex requests, potential data breaches, or non-compliance issues to the Deputy Practice Manager/Practice Manager or GP Partners.

Clinical and Administrative Support

Provide administrative support to GPs, nurses, and other members of the clinical team.

Communication and Teamwork

Act as a first point of contact for internal and external queries regarding iGPR and SARs, handling them professionally and efficiently.

Work collaboratively with the reception and clinical teams to support daily operations.

First point of contact to efficiently handle patient request for medical.

Contribute to team meetings and service improvement initiatives.

Quality and Compliance

Follow practice policies and procedures, including safeguarding, infection control, and confidentiality.

Participate in audits, staff training, and quality improvement activities.

Support the Practice Manager in ensuring compliance with CQC and NHS England requirements.

Person Specification

Desirable

Experience working in an administrative role, preferably within a healthcare or other sensitive data environment.

Working knowledge of UK data protection legislation, including UK GDPR and the Data Protection Act 2018.

Strong IT skills, proficient in using Microsoft Office and quickly learning specific in-house systems.

Excellent communication skills, both written and oral, with the ability to handle sensitive and complex situations with diplomacy.

Strong organisational skills with the ability to manage a varied workload, prioritise tasks, and meet strict deadlines.

Essential

Experience using specific iGPR software.

Relevant qualification in Information Governance or Data Protection (e.g., BCS Practitioner Certificate).

Other Information

All staff are expected to adhere to the surgery's policies and procedures.

The role may evolve over time, and reasonable changes to duties may be made in consultation with the postholder.

Job Types: Part-time, Temporary
Contract length: 12 months

Pay: 28,167.64 per year

Benefits:

Bereavement leave Company pension Employee discount Free parking Health & wellbeing programme On-site parking Sick pay
Work Location: In person

Application deadline: 23/01/2026
Reference ID: KMP525
Expected start date: 01/03/2026