As part of our preparations for the requirements of GDPR, we have reviewed how we demonstrate accountability for our processing activities.
SM重口 (LFRS) is a public authority and therefore we have appointed a Data Protection Officer (DPO) in compliance with Article 37 of the General Data Protection Regulation.
Our Data Protection Officer plays a key role in ensuring our accountability, but is not solely responsible.
The Key Information Governance Roles within the Organisation are as follows:
Senior Information Risk Owner 鈥 Justin Johnston, Director of Strategy and Planning.
Data Protection Officer 鈥 Dominic Howell, Service Solicitor.
Information Asset Owners 鈥 all Heads of Department
Information Governance Contact 鈥 Michael Threlfall, Information Governance Manager.
Information Asset Administrators 鈥 nominated by IAOs, number dependent on volume and nature of processing of information.
Our SIRO, DPO and IAOs, in conjunction with our Information Governance Team are responsible for making sure that our business processes and decision making are in line with GDPR requirements and good practice.
Our Information Governance Team provide advice, monitor compliance and carry out key tasks like responding to requests, handling security incidents, assist in managing records and promote good privacy, security and information management practices.
Our approach has 鈥榩rivacy by design and default鈥 at the forefront. We have an established privacy assessment process led by our Data Protection Officer who is available to provide advice throughout the process. This process is linked to our procurement, supplier assessment and contract management processes.
We have key accountability documentation including a record of our processing activities, corporate retention schedule and information asset register. Our business processes require that decisions and rationale are documented.
We are committed to being transparent with people who interact with us and use our services. We regularly review, monitor and update our Privacy Notices in order to accurately reflect our processing activates.
Training in data protection and governance for new starters and existing staff is ongoing. Where specific training needs are identified, we are committed to providing appropriate training and support.听
Our Data Protection Officer
This explains how our Data Protection Officer fits into our governance structure.
SM重口 (LFRS) is a public authority and therefore we have appointed a Data Protection Officer (DPO) in compliance with Article 37 of the General Data Protection Regulation.
This statement explains how the role of the Data Protection Officer works within LFRS.
Our Data Protection Officer is Dominic Howell. Dominic is also the Service Solicitor.听
Independence
Our DPO is free of conflicting priorities and is able to raise issues in the way and in the forum they see fit, without approval from their line manager or others to do so. Our DPO is not penalised for performing their tasks.听
Reporting to highest level of management
The DPO is accountable to the Service鈥檚 Executive Board. The DPO is responsible for reporting risks or opportunities and recommending appropriate actions in relation to LFRS鈥檚 processing of personal information.
Decision making
Where the advice of the DPO is not followed, this is documented.
If you have any queries please email infogov@lancsfirerescue.org.uk