Figures

2 Data protection roles

Within the data protection framework relevant to our compliance with the UK GDPR, the following major roles need to be defined and allocated:

Data Controller Data Processor Information Security Manager Data Protection Officer

The specific responsibilities of each of these roles are set out in later sections of this document. There are also particular data protection responsibilities that must be carried out by existing internal roles within the organisation and these are also set out in summary within this document.

These roles are:

Department Managers Employees

In general, responsibilities that apply to all employees, contractors and other interested parties are set out within the relevant organisational policies.

A subset of the organisation chart showing the relevant data protection roles is shown below:

Figure 1: Organisation chart

[Explain the main parts of the structure and any relevant information such as geographical location, upcoming changes, part-time positions etc.]