Data Protection Officer

Caroline Smith made this Freedom of Information request to Highland Council

Automatic anti-spam measures are in place for this older request. Please let us know if a further response is expected or if you are having trouble responding.

The request was successful.

Dear Highland Council,

1. Could you let me know?

a. What position in the Council is designated as Senior Information Risk Owner (SIRO)?
b. The name of your Data Protection Officer (DPO)?
c. Job title of the DPO, if not just DPO?
d. If the DPO also has other duties, approximately how much of their time is spent on DPO work?
e. If the DPO has other responsibilities, has a risk assessment been carried out to ensure that any potential conflicts of interest as identified in the GDPR and the guidance from the European Data Protection Board are managed? If so, has this been reviewed in light of the recent decision of the Belgium Data Protection Authority (28 April 2020): https://edpo.com/news/dpo-and-conflict-o...
f. The line manager of the DPO – i.e. the post that the post holder reports to. Is it the SIRO?
g. Who the DPO reports to in their role as DPO if that differs from the line manager? Is it the SIRO?
h. At what spinal point is the DPO paid?
i. Key relevant qualifications that the DPO and SIRO hold or relevant training completed.

2. And could you provide the relevant extract of the Council’s Organisational Chart that shows the DPO, the DPO’s line manager, the post holder that the DPO reports to, the SIRO and Chief Executive?

Yours faithfully,

Caroline Smith

Highland Council

Case Ref: HC0226-7551  
Dear Ms Smith, 
We acknowledge receipt of your request for information under the
FOI legislation received on 19/08/2020.
Subject: 
Data Protection Officer
Request Detail:
1. Could you let me know? a. What position in the Council is designated as
Senior Information Risk Owner (SIRO)? b. The name of your Data Protection
Officer (DPO)? c. Job title of the DPO, if not just DPO? d. If the DPO
also has other duties, approximately how much of their time is spent on
DPO work? e. If the DPO has other responsibilities, has a risk assessment
been carried out to ensure that any potential conflicts of interest as
identified in the GDPR and the guidance from the European Data Protection
Board are managed? If so, has this been reviewed in light of the recent
decision of the Belgium Data Protection Authority (28 April 2020):
https://eur02.safelinks.protection.outlo...
f. The line manager of the DPO ? i.e. the post that the post holder
reports to. Is it the SIRO? g. Who the DPO reports to in their role as DPO
if that differs from the line manager? Is it the SIRO? h. At what spinal
point is the DPO paid? i. Key relevant qualifications that the DPO and
SIRO hold or relevant training completed. 2. And could you provide the
relevant extract of the Council?s Organisational Chart that shows the DPO,
the DPO?s line manager, the post holder that the DPO reports to, the SIRO
and Chief Executive?
The Highland Council will endeavour to respond within the legislative time
scale of 20 working days from date of receipt unless further clarification
of your request is required.
Further information on response times can be found at:
[1]http://www.itspublicknowledge.info/YourR...
Yours Sincerely,
The Highland Council
This is an automatically generated email - PLEASE DO NOT REPLY 

Unless related to the business of The Highland Council, the views or
opinions expressed within this e-mail are those of the sender and do not
necessarily reflect those of The Highland Council, or associated bodies,
nor does this e-mail form part of any contract unless so stated.
Mura h-eil na beachdan a tha air an cur an cèill sa phost-d seo a'
buntainn ri gnothachas Chomhairle na Gàidhealtachd, 's ann leis an neach
fhèin a chuir air falbh e a tha iad, is chan eil iad an-còmhnaidh a'
riochdachadh beachdan na Comhairle, no buidhnean buntainneach, agus chan
eil am post-d seo na phàirt de chunnradh sam bith mura h-eil sin air
innse.

References

Visible links
1. http://www.itspublicknowledge.info/YourR...

Miles Watters, Highland Council

Dear Ms Smith,
I refer to your request below and have provided the answers in red under
each question.
 
I hope that this is to your satisfaction.
 
Under Section 20 of the Freedom of Information (Scotland) Act 2002, you
have the right to request that the Highland Council reviews any aspect of
how it has dealt with your request. This requirement for review should be
put in writing to the Freedom of Information Officer, Chief Executive’s
Office, Glenurquhart Road, Inverness IV3 5NX, within 40 working days of
receipt of this letter. The request should include details of the
information requested and the aspects of the Highland Council’s response
which you are not satisfied with.
 
If you are subsequently dissatisfied with the outcome of the Council's
review, you have the right to appeal to the Scottish Information
Commissioner under Section 47 of the Act, within six months of receiving
the Council's review response.
 
Further guidance on information request reviews and right to appeal can be
found on the Scottish Information Commissioner website at
[1]www.itspublicknowledge.info .
 
Yours sincerely,
 
Miles Watters
 
Miles Watters | Freedom of Information & Data Protection Manager |
Chief Executive's Office | The Highland Council | Glenurquhart Road |
Inverness IV3 5NX |
Tel. 01463 702029 | [2]www.highland.gov.uk |
 
 
 

show quoted sections