Eligibility

This role is only open to applicants that currently work within an NHS Trust within the Hampshire and Isle of Wight Integrated Care System (HIOW ICS).

Overview

Hampshire and the Isle of Wight Acute Care Collaborative have come together as part of the Integrated Care Board (ICB) as an Acute Provider Collaborative (APC) to invest in Electronic Patient Record (EPR) functionality. This is to meet the needs of our whole ICS population, recognising that the organisation of clinical care needs to change and develop radically in order to meet the challenges we face.

The post holder will be responsible for overseeing the Information Governance activities related to the shared Electronic Patient Record (EPR) across four NHS Trusts. This includes leading the development of the Joint Controller Agreement (JCA) to define the roles, responsibilities, and data protection obligations of each Trust in relation to joint data processing.

The IG Lead will also lead Data Protection Impact Assessments (DPIAs) across the programme lifecycle, ensuring privacy risks are proactively identified and mitigated. Additionally, the role involves reviewing and harmonising IG policies across all participating Trusts to ensure compliance with UK GDPR, the Data Protection Act 2018, and NHS national guidance.

The Information Governance (IG) Lead will be responsible for leading the preparatory IG activities that underpin the successful and compliant implementation of the shared Electronic Patient Record (EPR) across the four NHS Trusts participating in the Acute Provider Collaborative (APC). Working in close collaboration with local IG leads, Digital teams, Data Protection Officers (DPOs), and the wider Integrated Care System (ICS), the post holder will ensure robust governance arrangements are in place to support lawful, secure, and transparent use of patient data across organisational boundaries.

The role will include a mix of home and cross site working.

Responsibilities and Requirements

• Oversee Information Governance activities related to the shared EPR across four NHS Trusts.
• Lead the development of the Joint Controller Agreement (JCA) defining roles, responsibilities, and data protection obligations for joint data processing.
• Lead Data Protection Impact Assessments (DPIAs) across the programme lifecycle to identify and mitigate privacy risks.
• Review and harmonise IG policies across participating Trusts to ensure compliance with UK GDPR, the Data Protection Act 2018, and NHS national guidance.
• Lead preparatory IG activities underpinning the compliant implementation of the shared EPR across the APC, in collaboration with local IG leads, Digital teams, DPOs, and the ICS.
• Ensure robust governance arrangements to support lawful, secure, and transparent use of patient data across organisational boundaries.
• Work in a hybrid model with a mix of home and cross site working.

Organisational Context

Our vision is to provide outstanding care for every patient. Patient care is at the heart of what we do at our three sites: Basingstoke and North Hampshire Hospital, Royal Hampshire County Hospital in Winchester and Andover War Memorial Hospital. Hampshire Hospitals NHS Foundation Trust provides medical and surgical services to a population of approximately 600,000 people across Hampshire and parts of West Berkshire.

Our cultural ambition is to have a culture that places people at the heart of all we do, where we all belong, and where learning, improvement and excellence thrive.

We provide specialist services to people across the UK and internationally. We are one of only two centres in the UK treating pseudomyxoma peritonei (a rare form of abdominal cancer) and we are leaders in the field of tertiary liver cancer and colorectal cancer.

The trust employs more than 9,000 staff and has a turnover of over £500 million a year. As a Foundation Trust, we are directly accountable to our members through the governors. The Council of Governors represent the interests of their constituencies and influence the future plans of the Foundation Trust.

Tackling Climate Change: Hampshire Hospitals aims to embed sustainability and net zero carbon principles into the delivery of care across all its services. To find out more, search HHFT Climate Action or contact climateaction@hhft.nhs.uk.

Please see the attached Job Description and Person Specification for more details including main responsibilities.

This advert closes on Wednesday 1 Oct 2025