Candidate Campaign Information Pack Data Protection Officer

1 Candidate Campaign Information Pack Data Protection Officer Dear Candidate , Thank you for your interest in the post of Data Protection Officer . This Candidate Pack includes the following Information : Full and detailed Job Specification and important dates to note Recruitment Process detail and important dates to note Candidate General Declaration Please ensure that you read this Campaign Information Pack in detail and that you fully understand the process. For any informal enquiries regarding the position and job specification please contact: Elaine McGrane, National Recruitment Operations Manager - Should you have any specific queries in relation to the recruitment process please contact the Tusla Recruitment team via: or Tusla Recruit Campaign Manager: Sabrina McGeough: / 087 714 3012.

2 Kind Regards, Tusla Recruitment Team Data Protection Officer Job Specification Job Title, Grade and Data Protection Officer (DPO). Grade Code Grade Code: Q137. Campaign Reference TN2022 DPO. Approval Code Applications Applications are invited by CV, together with a personal statement clearly stating suitability considered Via for the role as linked to the stated competencies (250 words max) to Sabrina McGeough by 12:00 midday on Tuesday, 7th June 2022. This application process is fully outlined in section 2 of the recruitment process' section of this Candidate Information Pack. Please take note of the guidance given relating to CV, personal statement and also the provision of an organisation chart indicating your current (or most recent) position within the Senior Management team in your organisation/company.

3 Opening date for Thursday, 12th May 2022. Applications Closing Date for 12pm, Tuesday, 7th June 2022. Applications Proposed Interview June 2022. date(s) - may be subject to change based on volume of candidates and availability of Service resources. Contact for Informal Elaine McGrane, National Recruitment Operations Manager, Enquiries Making an informal enquiry gives you the opportunity to ask questions about the Campaign and job specification. This informal enquiry contact is available only for the duration of the application process. Location of Post Flexible location, requiring regular travel to Tusla Corporate Office, Brunel Building, Heuston South Quarter, Dublin 8, and between Tusla locations.

4 Details of Service The Child and Family Agency was established on 1st January 2014 and is responsible for improving wellbeing and outcomes for children. It represents the most comprehensive reform of services for the development, welfare and Protection of children and the support of families ever undertaken in Ireland. It is an ambitious move which brings together some 4,000 staff who were previously employed within Children and Family Services of the Health Service Executive, the National Educational Welfare Board and the Family Support Agency. The Child and Family Agency has responsibility for the following range of services: Child Welfare and Protection Services, including family support services.

5 Family Resource Centres and associated national programmes. Early years (pre-school) Inspection Services. Educational Welfare responsibilities including School completion programmes and Home School Liaison. Domestic, sexual and gender-based violence services. Services related to the psychological welfare of children. Adoption & Alternative Care. Tusla processes a large volume of highly sensitive personal data on a daily basis in order to deliver the critical services it provides to Children and Families across the State. In doing this, Tusla must ensure that it has adequate organisational and technical measures in place; that the rights and freedoms of Tusla service users are respected and that privacy risks to those rights and freedoms are minimised; and that a fit for purpose operating model for Data Protection and Freedom of Information (FOI) and is implemented.

6 These are the three objectives of Tusla's GDPR Programme, a multi-annual strategic transformation programme which is now in its third phase of implementation. The GDPR programme focuses on driving a wide range of improvements in Tusla's data Protection and FOI compliance and control environment, including for example: Data Protection Operating Model Design and Implementation, such as policy and process enhancements or organisation design changes, including the establishment of regional privacy network;. Data Protection Impact Assessments and Third-Party Privacy Risk Management, to assess complex data processing activities and third-party data sharing arrangements to identify the required privacy safeguards and controls.

7 Regulatory Engagement with the Data Protection Commission and the Office of the Information Commissioner in relation to Tusla's regulatory obligations; and Change Management, Training & Awareness, to embed best practice data Protection across Tusla and ensure all staff fully understand their roles and responsibilities in relation to data Protection and FOI compliance. Further Information is available on Purpose of Role: The DPO is responsible for the strategic and operational management of the Data Protection Unit (DPU) including the National Freedom of Information (FOI) Unit, and the governance and operational management of the GDPR Programme.

8 The role requires an understanding of public service delivery, management of third-party risk, management and development of staff, and the wider public sector. Reporting For the purpose of Tusla's adherence with Recital 97 of the GDPR, the DPO reports to CEO and Relationship Organisational Development Committee (ODC) of the Board. For strategic and operational management of the DPU, the governance, and operational management of the GDPR. Programme, the DPO reports to the Director of Corporates Services or another designated manager. The DPU, Privacy and FOI Network organisational charts are attached to provide an overview of the Data Privacy Operating Model within Tusla.

9 Key relationships / Line management for DPU and FOI. The DPU comprises an approved staffing Interfaces complement of whole time equivalents (WTEs). Tusla Policy, procedural, GDPR, data Protection and FOI good practice support to a privacy and FOI Officer network of WTEs devolved to and managed by Tusla's six Regional Chief Officers. Chief Executive Officer and Office of the Chief Executive Officer (OCEO) (including Communications). Organisational Development Committee of the Board (ODC). Executive Management Team (EMT). Service and Integration Directorate, Regional Chief Officers (RCO), and Operational staff.

10 Commissioning. Executive GDPR Steering Committee. GDPR Programme Strategic Partner (PwC). Director of Corporate Services. Data Protection Commission (DPC). Office of the Information Commissioner (OIC). Department of Children, Equality, Disability, Integration and Youth (DCEDIY). Third parties relevant to Tusla statutory function and service delivery. Office of Legal Services (OLS). ICT Department. Parliamentary Affairs and Representations Unit. People and Change Directorate. Corporate Services, Finance & Procurement Directorates. Quality & Regulation Directorate. Duties and Stakeholder Engagement Responsibilities Lead internal and external stakeholder engagement with regard to matters of data Protection , FOI governance and compliance within Tusla.