Are you looking for your next challenge in digital?

We are pleased to be able to offer an exciting opportunity to join the Electronic Patient Record (EPR) Programme Team at Northampton General Hospital. In partnership with our chosen supplier, we have embarked on our digital excellence journey to implement a nationally-leading EPR system that will transform the quality of care for our patients and staff by having instantly accessible information using the latest mobile technology, reducing paper usage and utilising clinical decision support tools.

The DSP Specialist for EPR Implementation (fixed term, post holder) will play a pivotal role in the implementation of the Trust's EPR, managing the successful delivery of one or more of the modules that, together, make up the overall EPR. As part of a dynamic and agile team that is committed to our Vision 'Dedicated to Excellence', you will have significant personal opportunities to grow and develop, as well as to tangibly impact how care is delivered in the future.

Main duties of the job

We are seeking a skilled and experienced DPIA (Data Protection Impact Assessment) Specialist to join our team for the implementation of an Electronic Patient Record (EPR) system. The DPIA Specialist will be responsible for conducting and overseeing the DPIA process to ensure compliance with data protection regulations and safeguarding patient information throughout the EPR implementation. This role requires excellent knowledge of data protection laws, strong analytical skills, and the ability to work collaboratively with cross-functional teams.

About us

Northampton General Hospital is one of the largest employers in the area and we are on an exciting journey. All of our divisions are committed to doing things better, with more efficiency as we update, modernise, and advance. We have also entered into a Group Model with neighbouring Kettering General Hospital NHS Foundation Trust and become University Hospitals of Northamptonshire.

Our Excellence Values

• Compassion
• Accountability
• Respect
• Integrity
• Courage

We want to recruit the best people to deliver our services across the University Hospitals of Northamptonshire and help to unleash everyone's full potential. As an organisation, we value how we communicate and promote our vacancies to all communities.

We are a Defence positive trust, supporting our reservists, veterans, spouses and partners.

The Hospital Group encourages applications from people who identify from all protected groups, especially those from BAME, Disabled and LGBTQ+ backgrounds as these are underrepresented in our hospitals.

We understand that we need to work with colleagues from diverse backgrounds and make sure the environment they work in is inclusive and collaborative.

We have active Networks that promote and support colleagues from all backgrounds.This ensures everyone feels supported and has a sense of belonging working for Kettering and Northampton General Hospitals.

Job description

Job responsibilities

Responsibilities

• Conduct DPIAs: Lead the process of conducting Data Protection Impact Assessments for the EPR implementation project, ensuring that all necessary steps and considerations are taken into account.
• Compliance: Ensure that the EPR implementation project adheres to relevant data protection laws, regulations, and best practices, such as Mangement of Records Code of Practice, UK General Data Protection Regulations (GDPR) and DPA 2018.
• Risk Assessment: Identify and assess potential risks and impacts on patient data privacy and security throughout the EPR implementation, including data access, storage, transmission, and retention.
• Mitigation Strategies: Develop and recommend appropriate mitigation strategies to address identified risks, including technical, organizational, and procedural measures.
• Collaboration: Collaborate with project teams, IT professionals, suppliers, CCIO, CSO, legal experts, and other stakeholders to ensure that privacy and security requirements are integrated into the EPR implementation process.
• Documentation: Prepare and maintain documentation related to DPIA processes, including reports, findings, and recommendations using the Trusts DPIA System - the Information Sharing Gateway.
• Training and Awareness: Provide training and guidance to project teams and staff members regarding data protection principles, DPIA requirements, and best practices for handling patient information.
• Monitoring and Evaluation: Monitor the implementation of recommended mitigation measures, evaluate their effectiveness, and provide ongoing support and guidance as needed.

Please see job description and person specification for further details

Person Specification

Educations, Training and Qualifications

Essential

• Educated to Degree level or equivalent level of education, training or experience
• ISO 17024- accredited GDPR Foundation and Practitioner certificate or evidence of further education in the application of ISO/IEC 27002:2013 and other associated standards
• Evidence of continuous professional development

Desirable

• Additional professional relevant qualification, for example, GDPR Practitioner
• Formal Data Protection Act Training and freedom of information act
• Relevant professional qualification in training development/ training delivery

Knowledge and Experience

Essential

• Proven experience in conducting DPIAs and implementing data protection measures, preferably in the healthcare sector or with EPR systems
• Specialist knowledge of the Data Security and Protection Toolkit and its application.
• In-depth knowledge of data protection laws and regulations, such as GDPR and Data Protection Act (DPA) 2018, and their implications for EPR implementations
• Evidence of up to date knowledge of data security and protection guidelines and legislation relevant to the NHS.
• Experience in identifying and investigating data security and protection issues and incidents
• Experience in developing and delivering training sessions
• Experience of conducting training needs analysis
• Experience of documenting and implementing Information Sharing Agreements
• Experience of supporting the completion of Data Protection Impact Assessments and identifying information risks
• Experience in reviewing and updating Policies and Procedures
• Knowledge of the information governance roles within the Trust (e.g. Senior Information Risk Owner, Caldicott Guardian and Information Asset Owner)

Desirable

• Working knowledge of Freedom of Information Act 2000 and Records Management.
• Experience of working in the NHS
• Experience of working with the DSP Toolkit in an acute NHS setting
• Experience in working with Patient Administration Systems, e.g. CAMIS, Careflow
• Analytical and judgement skills for problem solving
• Experience developing and delivering communication campaigns
• Experience of writing and presenting complex reports and presentations
• Previous experience of the Information Sharing Gateway

Skills

Essential

• Strong analytical and problem-solving skills, with the ability to assess risks and develop effective mitigation strategies
• Excellent written and verbal communication skills, with the ability to communicate complex concepts to both technical and non-technical stakeholders
• Excellent written and verbal communication skills
• Able to maintain confidentiality at all times
• Developed attention to detail and accuracy
• Excellent IT skills, including experience of Microsoft Word, Excel, PowerPoint, Outlook and Visio
• Organisational skills and the ability to work methodically and prioritise
• Ability to deliver clear and effective training to staff at all levels and of all abilities
• Ability to cope under pressure and meet strict deadlines e.g. FOI responses, Incident response times
• Ability to help build effective working relationships at all levels, both within NGH and externally
• Ability to communicate appropriately and effectively with all levels of staff
• Ability to take accurate meeting notes including action and decision logs
• Able to learn and utilise new systems quickly and effectively
• Advanced Excel skills, including data presentation
• Data analysis skills
• Excellent Keyboard skills
• Ability to work collaboratively in a cross-functional team environment, with strong interpersonal and relationship-building skills

Desirable

• Negotiation skills
• Ability to interpret and judge conflicting views

Key Competencies/Personal Qualities and Attributes

Essential

• Passionate and committed to bring our Dedicated to Excellence values to life, improving the way we work with each other, particularly focusing on empowerment, equality diversity and inclusion of our staff, patients and service users
• Self-motivated and tenacious
• Ability to use own initiative to prioritise and problem solve
• Courteous, tactful and efficient telephone manner
• Strong interpersonal skills, with the ability to establish and maintain good working relationships at all levels
• Must be able to understand the needs of patients and deal with all contacts in a sensitive manner
• Excellent Team working skills, demonstrable both within immediate team and across the wider organisation
• Ability to sit and work at a desk / VDU for long periods of time
• Word process and data input for a substantial proportion of working time
• Able to concentrate when transcribing dictations or typing complex documents possible interruptions
• Occasional exposure to incidents of a distressing nature
• Typing letters and processing of correspondence of a sensitive and confidential nature
• Ability to travel to the Northampton Hospital site and to other sites across the Group
• Attention to detail and ability to prioritise and manage multiple tasks simultaneously

Desirable

• Able to deal with difficult situations with tact and sensitivity
• Able to represent the Trust at local, national and regional events

Employer details

Employer name

Northampton General Hospital

Address

Northampton General Hospital

Cliftonville Road

Northampton

NN1 5BD

Any attachments will be accessible after you click to apply.

265-6605934