Oct 2013 to date, Freelance information governance trainer and consultant
Establishing training and consultancy firm for records management, data protection and FOI;
Associate trainer for Act Now Training Ltd. http://www.actnow.org.uk/content/160,
Direct provision of training events to clients, including successful GDPR briefings and workshops;
Providing information governance consultancy and training to a growing range of public sector bodies and business.
Nov 2006 to December 2016, NHS Education for Scotland, Glasgow ( www.nes.scot.nhs.uk )– Information Governance Manager
Responsible for all information governance workstreams for an 800+ staff NHS Board including:
serve as Information Security Officer, managing programme of work towards ISO27001 compliance and accreditation;
driving corporate records management; including the implementation of an Enterprise Content Management System and developing vanguard NHS Records Management Plan under the Public Records (Scotland) Act 2011 and aligned to ISO15489;
providing corporate leadership on Freedom of Information and Data Protection compliance, including all case handling for FOI and DP requests;
advising the Board, Caldicott Guardian and staff on all aspects of NHS Information Governance standards, providing horizon scanning on data protection and other changing regulatory environments;
designing and delivering mandatory staff training in data protection and information governance including on-line, webinar and face-to-face training and awareness raising;
representing the organisation to Scottish Government, Information Commissioner’s Office, Office of the Scottish Information Commissioner and other regulatory bodies;
developing systems for information risk management and incident reporting.
Sep 2003 to Oct 2006, Department of International Development, East Kilbride and London (www.dfid.gov.uk ) – Head of Open Government Unit
Responsible for:
development and roll-out of electronic records management system to 3000 staff in 60 sites worldwide, including the delivery of staff training;
serving as Data Protection Officer, providing advice on privacy issues to colleagues at all levels and managing subject access requests;
advising Ministers and staff on FOI compliance; designing and managing FOI procedures and staff training with direct responsibility for case handling;leading a team of eight staff.
Aug 1997 to Aug 2003, South Lanarkshire Council (www.southlanarkshire.gov.uk) , Hamilton – Senior Archivist
Establishing and managing public archives and records management services for a local authority with 17,000 employees; designing and implementing records management processes; setting up 10,000 box records centre with supporting database system; initiating preparations for FOI compliance.
Feb 1996 to Aug 1997, Glasgow University Archives – Senior Archivist
Nov 1994 to Feb 1996, Business Archives Council of Scotland – Surveying Officer
Aug 1993 to Nov 1994, Shell International Petroleum Co. Ltd, London –Assistant Archivist
