Information governance

You’ll make sure NHS organisations meet their legal responsibilities on  

• data protection and information security
• information sharing
• confidentiality
• information management.   

You’ll play a vital leadership role in the appropriate and secure sharing of personal confidential data.  

Life in the IG team

IG officer

You’ll spend most of your time supporting and advising colleagues and external stakeholders on data protection, data sharing and confidentiality. No two days are the same as you’ll be gathering information for the management and preparation of responses to information requests.  

IG officers working in hospitals and GP surgeries will mainly manage enquiries on patient confidentiality and staff data. In other organisations, you’re likely to be dealing with enquiries on data sharing between organisations eg for research and analysis.

As well as supporting managers in legal compliance, you’ll raise awareness of IG through training and education.

You’ll also help to deliver compliance statements and evidence.  

IG manager

You’ll support senior colleagues in delivering the organisation’s IG programme and ensure legal compliance is maintained. You’ll also work with colleagues in other teams such as cyber security and IT.  

Your expert knowledge means you’ll provide advice and guidance to a wide range of NHS colleagues. You may have direct interactions with patients raising concerns around their data and other organisations who want to share or request access to data held by your organisation.  

Vital to your role is supporting your organisation’s response to data breaches. You’ll also:  

• deliver training and run awareness programmes  
• manage information requests and respond to complex queries  
• coordinate and review evidence to support processes  
• carry out audits and data protection assessments
• review, draft and advise on data sharing agreements  

Senior IG managers may manage a budget and risk registers. You’ll also report to your organisation’s executive team and you’re likely to have line management responsibilities.  

Data protection officer

You’ll provide expert data protection advice to colleagues across the organisation. You’ll also monitor the organisation’s compliance with data protection law.

You’ll also be the first point of contact for questions or concerns about use of their data and the Information Commissioner’s Office who regulate data protection in the UK.  

You’ll be part of the team ensuring that people’s information is collected, used and shared lawfully, fairly, transparently and securely by:  

• developing and setting IG strategy, guidance, standards, procedures and policies  
• overseeing the completion of complex and high-risk data assessments and information requests  
• leading on the investigations and handling of incidents and data breaches

You’ll also manage complex breaches and data protection issues, engaging senior internal and external stakeholders.    

How much can I earn?

NHS employees are paid through national NHS terms and conditions, Agenda for Change (AfC). Pay for IG staff depends on the needs of your employer and your role.  

These pay bands are a general guide as every role is assessed against the AfC requirements:  

• IG apprentices - bands 4 - 5  
• IG administrators - bands 3 - 4  
• IG officers (including senior IG officers) - bands 4 - 6  
• IG managers - bands 6 - 8  
• Senior IG managers and heads of IG - bands 8a - 8b  
• Data protection officers - bands 8 - 9  

How about benefits?  

• make a real difference to the lives of both patients and colleagues by making sure information is managed and shared appropriately, transparently, safely and lawfully  
• work at the forefront of exciting new technologies and innovation  
• have opportunities to progress your career and specialise  
• have opportunities to work flexibly  
• have access to an excellent pension scheme  
• enjoy NHS discounts in shops, restaurants and online  

Must-have skills

Skills needed may differ depending on the role but generally you’ll need:

• good interpersonal and communication skills  
• critical thinking and problem-solving skills
• attention to detail and accuracy  
• an ability to prioritise work to meet changing demands  
• a proactive and continuous improvement mindset
• assertiveness and resilience  
• good decision-making skills  
• an understanding of technology, security and how data is accessed and used in the NHS  

As your career develops, and you move into senior roles, you’ll also need:  

• clear and persuasive report writing skills
• an ability to build relationships  
• developing processes for the use of data  
• confidence to be able to provide advice on major issues
• to take responsibility and accountability for your actions
• to deliver effective and accessible meetings and presentations  
• strong leadership and managerial skills  
• expertise in financial analysis and reporting and experience in budget management  

The Federation for Informatics Professionals (FEDIP) website contains further information about the experience, skills and accreditations required for IG roles.  

How to become an IG professional in the NHS

Apprenticeship

You might start by joining an apprenticeship programme and after gaining experience and skills, move onto more senior positions, such as an administrator.  

Direct entry

You could secure a post as an administrator in an IG or related department, allowing you to learn on the job. With professional development and more experience, you could progress to an officer or managerial position.  

Some information governance officers and managers already have relevant experience and/or qualifications eg in law, cyber security, risk management or quality assurance.

Senior positions  

IG qualifications, or other relevant professional qualifications, are usually required for senior positions.

What are my chances of starting a career in NHS IG?

There are currently around 1,000 people working in NHS IG in England. There are also learning and career progression opportunities in the NHS.  

Where a career in IG can take you

As an IG officer or manager, there are training and development opportunities to help you progress to senior management and data protection officer roles.  

Data protection officers can move into other senior compliance roles, including outside of health eg a director of regulatory and compliance activities, a chief privacy officer or a director of IG.  

You could also work in related areas:  

• Data or cyber security
• Law  
• Corporate governance