SFIA Skill
Information policy formation DPRO
The development of policies, procedures, working practices and training to promote compliance with legislation regulating the holding, use and disclosure of personal data.
Information policy formation: Level 6
Develops strategies for compliance with data protection legislation. Ensures that the policy and standards for compliance with data protection legislation are fit for purpose, current and correctly implemented. Reviews new business proposals and provides specialist advice on compliance issues. Acts as the organisation's contact for the data protection authorities.
Information policy formation: Level 5
Drafts and maintains the policy, standards and procedures for compliance with relevant legislation. Reviews information systems for compliance with legislation and specifies any required changes. Ensures that formal information access requests and complaints are dealt with according to approved procedures. Creates and maintains an inventory of data which is subject to data protection legislation. Prepares and reviews the periodic notification of registration details and submits it to the data protection authorities.