Head of Information Rights Unit

Purpose of post

Data and Geography Division sits within Digital, Data and Technology (DDaT) and plays a central role in enabling Welsh Government to use data, information and geographic evidence well. The division provides specialist leadership on data, geography, information rights, information governance and related professional standards. It works across Welsh Government and with partners to ensure that data and geographic information are managed, shared, protected and used responsibly, helping the organisation make better decisions for the people of Wales.

The role is the Head of the Welsh Government’s Information Rights Unit (IRU). The work of the unit is to ensure the Welsh Government meets its obligations and responsibilities as set out in the Information Rights and Data Protection legislation, specifically:

• The Data Protection Act 2018 (DPA)
• The UK General Data Protection Regulation 2018 (UK GDPR)
• The Data Use and Access Act 2025 (DUAA)
• The Freedom of Information Act 2000 (FOIA)
• The Environmental Information Regulations 2004 (EIR)
• The Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR)

This role is part of the Government Knowledge and Information Management (GKIM) profession. The profession brings together specialists who support the effective management, protection and use of information across Government. 

As a Data Protection Practitioner, you will apply specialist knowledge to help Welsh Government understand and meet its legal obligations, manage privacy risks and maintain public trust. The role requires practical application of data protection expertise across operational, policy and governance contexts

Key tasks

The role requires a thorough understanding of the Acts legal obligations as they apply to the Welsh Government, ensuring they are embedded in the business. The role requires being the primary lead and contact for:

• Drafting policy and guidance on Information Rights and Data Protection legislation
• Providing timely advice and guidance on the data protection legislation as it applies to Welsh Government policy, lawmaking and security
• Providing advice and guidance to officials on the handling of Freedom of Information (FOI) requests
• Providing advice and guidance to help WG teams comply with their statutory obligations under information management legislation and the Code of Practice
• Using expert knowledge of the Data Protection Act (DPA), UK General Data Protection Regulation (GPDR), Privacy and Electronic Communications Regulations (PECR), Law Enforcement Directive (LED), FOI Act (FOIA) and Environment Information Regulations (EIR) to steer sensitive or difficult requests to a conclusion, and provide quality assurance on the responses
• Providing advice and guidance to officials on the handling of complaints and internal reviews
• Line management of 2x EO Caseworkers
• Providing advice, guidance and mentorship to IRU team members in their roles and caseloads, ensuring consistency and quality of output
• Keeping abreast of changes to guidance, legislation and case law and ensuring Welsh Government guidance is updated to reflect these

Development opportunities

The role offers significant development opportunities for someone looking to deepen their expertise in information rights, data protection and information governance while working at the centre of Welsh Government. The post holder will gain experience of advising on complex and high-profile issues, supporting Ministers and senior officials, and working across a wide range of policy and delivery areas. It also provides opportunities to develop leadership, line management, and stakeholder engagement skills within a supportive professional environment

Other vacancy related information

• In the event of a large number of applications, an initial sift will be conducted against the assessment criterion: Technical
• A reserve list may be held for this opportunity. Any candidate who is successful in being offered a reserve status, will remain on the reserve list for 12 months.
• Candidates are required to submit a CV as part of their application, CV’s should be of a maximum of 2 sides detailing your work experience and qualifications – CV’s will be scored against experience 1 and 2.
• A presentation of 5 minutes covering the technical skills will be required as part of the interview. More information will be provided in the invitations to that stage. No powerpoint.
• This post will be part of the Knowledge and Information Management (KIM) profession.
• Hybrid working arrangements reflect the current Welsh Government expectation that postholders spend at least 40% of their working time either in a physical office location or meeting face to face with external stakeholders where this supports effective delivery, relationship management and service leadership. This requirement may change in line with future organisational needs.