Legal Compliance Officer - Harlow Council

Legal Compliance Officer – Harlow Council 

Job Purpose:

To support the Legal Services department with statutory and organisational compliance through the provision of general and specialised activities across all areas of the Service.

The Role:

• To have responsibility for managing requests for information received under FOIA and EIR and to respond on behalf of the Council to all hybrid FOIA requests, seeking support from the Legal Services Manager in cases of complex requests.
• To have responsibility for responding to personal data requests (Subject Access Requests) made under DPA 2018 and GDPR, seeking support from the Legal Services Manager in cases of complex requests.
• To take the lead on managing and responding to internal and third-party personal data sharing requests under DPA 2018 and GDPR, seeking support from the Legal Services Manager in cases of complex requests.
• To be responsible for undertaking processes and requirements for compliance with and reaccreditation of the Legal Service’s LEXCEL accreditation.
• To have responsibility for the processing and prompt payment of invoices in accordance with agreed timescales using the Council’s systems

Duties Include but Not Limited to –

• Access and monitor information requests received under FOIA that require the disclosure of information from multiple departments/services of the Council (“hybrid FOIA requests”) using the Council’s electronic system.
• Ensure that hybrid FOIA requests are answered within the statutory timeframes.
• Draft and send response letter and disclosure of requested information to the FOIA requestor
• Provide advice and assistance to departmental FOI officers in relation to the answering of FOIA requests and any applicable exemptions, seeking support from the Legal Services Manager in cases of complex requests.
• Access and monitor personal data requests (“Subject Access Requests”) under DPA and GDPR using the Council’s electronic system.
• Draft and send the SAR response letter.
• Ensure that personal data requests are answered within the statutory timeframes.