HRB-2021-Data Protection Officer services

Tender description

The Health Research Board (HRB) is a state agency that supports research and provides evidence to prevent illness, improve health and transform patient care. The HRB has 80 staff. Our annual budget is in excess of €50m and we manage a research investment portfolio of approximately €200m. The agency is funded mainly by the Department of Health, and Board members are appointed by the Minister for Health. The General Data Protection Regulation (GDPR) came into effect in May 2018. As the processes and practices of the General Data Protection Regulation (GDPR) mature it is evident that the HRB needs a different focus on how we provide DPO services. Procuring this role as a service means that the HRB can get access to expert advice and guidance that would help us to address the GDPR’s compliance demands while staying focused on our core activities. Tasks to be performed (these tasks are not exhaustive and may change) • Ensure compliance with all regulations. • Manage and monitor the HRB DPO email box and respond to queries in a timely manner (or equivalent). • Work proactively across the organisation. • Prioritise GDPR queries. • Work with ICT in maintaining and enhancing our OneTrust Software. • Ensure all HRB GDPR policies are kept up to date. • Keep HRB staff informed on latest GDPR information. • Collect information to identify processing activities. • Analyse and check compliance of any processing activities. • Inform, advise and issue recommendations. • Data Protection Impact Assessments: - Assist and provide advice in terms of whether or not to carry oout an assessment and whether or not it has been carried out accurately and the conclusions comply with the GDPR. • Data Breaches. - Manage the end to end process for any suspected Data Breaches. • Work with Internal audit when needed. • Cooperate with the supervisory authority (DPC) and act as the point of contact for the supervisory authority. • Ensure yearly GDPR training for all staff.