Data Protection Officer

Caroline Smith made this Freedom of Information request to East Renfrewshire Council

Automatic anti-spam measures are in place for this older request. Please let us know if a further response is expected or if you are having trouble responding.

The request was successful.

Dear East Renfrewshire Council,

1. Could you let me know?

a. What position in the Council is designated as Senior Information Risk Owner (SIRO)?
b. The name of your Data Protection Officer (DPO)?
c. Job title of the DPO, if not just DPO?
d. If the DPO also has other duties, approximately how much of their time is spent on DPO work?
e. If the DPO has other responsibilities, has a risk assessment been carried out to ensure that any potential conflicts of interest as identified in the GDPR and the guidance from the European Data Protection Board are managed? If so, has this been reviewed in light of the recent decision of the Belgium Data Protection Authority (28 April 2020): https://edpo.com/news/dpo-and-conflict-o...
f. The line manager of the DPO – i.e. the post that the post holder reports to. Is it the SIRO?
g. Who the DPO reports to in their role as DPO if that differs from the line manager? Is it the SIRO?
h. At what spinal point is the DPO paid?
i. Key relevant qualifications that the DPO and SIRO hold or relevant training completed.

2. And could you provide the relevant extract of the Council’s Organisational Chart that shows the DPO, the DPO’s line manager, the post holder that the DPO reports to, the SIRO and Chief Executive?

Yours faithfully,

Caroline Smith

*Customer Services, East Renfrewshire Council

Thank you for your enquiry.

 

A Customer Service Officer will either answer your enquiry directly or
forward it to the appropriate Officer in East Renfrewshire Council within
the next 5 working days.

 

If your enquiry is a complaint you should receive a response within 5
working days.  If it is a Freedom of Information request you should
receive a response within 20 working days.

 

Did you know you can access a wide range of Council services online 24/7.
[1]www.eastrenfrewshire.gov.uk/doitonline

 

The council processes your personal data on the legal basis of carrying
out tasks in the public interest or for performance of a contract.  You
can find out how we use your information in our privacy statement on our
website. [2]http://www.eastrenfrewshire.gov.uk/datap...

 

Kind regards

 

Customer Services

 

 

show quoted sections

References

Visible links
1. file:///tmp/www.eastrenfrewshire.gov.uk/doitonline
2. http://www.eastrenfrewshire.gov.uk/datap...

*Customer Services, East Renfrewshire Council

Thank you for your enquiry.

 

A Customer Service Officer will either answer your enquiry directly or
forward it to the appropriate Officer in East Renfrewshire Council within
the next 5 working days.

 

If your enquiry is a complaint you should receive a response within 5
working days.  If it is a Freedom of Information request you should
receive a response within 20 working days.

 

Did you know you can access a wide range of Council services online 24/7.
[1]www.eastrenfrewshire.gov.uk/doitonline

 

The council processes your personal data on the legal basis of carrying
out tasks in the public interest or for performance of a contract.  You
can find out how we use your information in our privacy statement on our
website. [2]http://www.eastrenfrewshire.gov.uk/datap...

 

Kind regards

 

Customer Services

 

 

show quoted sections

References

Visible links
1. file:///tmp/www.eastrenfrewshire.gov.uk/doitonline
2. http://www.eastrenfrewshire.gov.uk/datap...

*Customer Services, East Renfrewshire Council

1 Attachment

Good morning

Thank you for your recent Freedom of Information request. Please find attached your FOI acknowledgement letter.

Please note that you can now submit FOI requests online at - https://www.eastrenfrewshire.gov.uk/your...

Kind regards

Claire
Claire Sutherland
Customer Service Assistant
Customer First
 0141 577 3001

8 Did you know that you can access a wide range of council services online - 24/7? Visit www.eastrenfrewshire.gov.uk
 Please consider the environment - Do you need to print this email?

Protective Marking – ‘Mark to Protect’

OFFICIAL - No special handling controls and no requirement to mark (routine business information)
OFFICIAL-SENSITIVE - Protective measures/controls required (business sensitive, personal or special category information)

Connect and share with us
eastrenfrewshire.gov.uk I @EastRenCouncil I facebook.com/eastrenfrewshirecouncil

show quoted sections

Johnston, Rose, East Renfrewshire Council

1 Attachment

In response to your Freedom of Information request received on the 17^th
August I now provide response to your request.

 

1.Could you let me know?

a.What position in the Council is designated as Senior Information Risk
Owner (SIRO)?

Response a

The Chief Executive

 

b.The name of your Data Protection Officer (DPO)?

Response b

Rose Johnston

 

c.Job title of the DPO, if not just DPO?

Response c

Information Governance Officer (IGO)

 

d.If the DPO also has other duties, approximately how much of their time
is spent on DPO work?

Response d

The principal duties of the IGO is to ensure the Council manages
information and data governance compliance appropriately including the
statutory tasks of the DPO and in this respect time is not recorded
specifically for DPO statutory tasks.

 

e.If the DPO has other responsibilities, has a risk assessment been
carried out to ensure that any potential conflicts of interest as
identified in the GDPR and the guidance from the European Data Protection
Board are managed? If so, has this been reviewed in light of the recent
decision of the Belgium Data Protection Authority (28 April 2020):
[1]https://edpo.com/news/dpo-and-conflict-o...

Response e

The responsibilities of the IGO role do not present a potential conflict
with the statutory DPO functions and in this regard there is no necessity
to undertake a risk assessment following the above decision.  Prior to
GDPR the DPO role was undertaken by the Head of Legal and recognised the
changes in data protection legislation presented a conflict and in 2019 a
dedicated Data Protection Officer was appointed.

 

f.The line manager of the DPO – i.e. the post that the post holder reports
to. Is it the SIRO?

Response f

The Strategic Insight and Community Senior Manager.

 

g.Who the DPO reports to in their role as DPO if that differs from the 
line manager? Is it the SIRO?

Response g

The DPO reports to the SIRO and Corporate Management Team

 

h.At what spinal point is the DPO paid?

Response h

    01/04/2020 01/04/2020
Hourly
GRADE   Rate 35 Hour
12      
pt 1   23.24 £42,411
pt 2   23.92 £43,652
pt 3   24.67 £45,020

 

i.Key relevant qualifications that the DPO and SIRO hold or relevant
training completed.

Response i

The DPO holds a recognised data protection practitioner qualification. 
The SIRO has completed data protection required of all employees. The
designation of SIRO role is based upon seniority of the role.  

 

2.And could you provide the relevant extract of the Council’s
Organisational Chart that shows the DPO, the DPO’s line manager, the post
holder that the DPO reports to, the SIRO and Chief Executive?

Response 2

This can be found by accessing the following hyperlink:
[2]https://www.eastrenfrewshire.gov.uk/medi...

 

East Renfrewshire Council offers the opportunity to apply to the Council
for a review of how we have dealt with your enquiry. If you wish to ask
for a review, please apply in writing within 40 working days to:

The Solicitor to the Council
Council Headquarters
Rouken Glen Road
Giffnock G46 6UG,

marking your letter “Freedom of Information, request for review”, and
stating the exact nature of the matter you wish to be reviewed.

The review will be carried out within 20 working days of receipt of your
appeal. If you are dissatisfied with the outcome of the review, you have
the right to then appeal to the Scottish Information Commissioner who has
extensive powers to investigate such matters. His address is:

Scottish Information Commissioner
Kinburn Castle
St. Andrews
Fife KY16 9DS

Yours faithfully

 

 

Rose Johnston

Information Governance & Data Protection Officer

East Renfrewshire Council

Eastwood Park

Rouken Glen Road

Giffnock G46 6UG

 

Contact Details

0141 577 3344

07825926575

Email [3][email address]

 

East Renfrewshire: Your Council, Your Future

[4]www.eastrenfrewshire.gov.uk

 

[5]Our Values email signature

 

Protective Marking – ‘Mark to Protect’

 

OFFICIAL - No special handling controls and no requirement to mark
(routine business information)

OFFICIAL-SENSITIVE - Protective measures/controls required (business
sensitive, personal or special category information)

 

Connect and share with us
[6]eastrenfrewshire.gov.uk I [7]@EastRenCouncil I
[8]facebook.com/eastrenfrewshirecouncil

 

 

show quoted sections

References

Visible links
1. https://edpo.com/news/dpo-and-conflict-o...
2. https://www.eastrenfrewshire.gov.uk/medi...
3. mailto:[email address]
4. http://www.eastrenfrewshire.gov.uk/
6. http://www.eastrenfrewshire.gov.uk/
7. http://www.twitter.com/Eastrencouncil
8. file:///tmp/facebook.com/eastrenfrewshirecouncil