:focus(2430x1406:2431x1407))
Secretariat
Tbc
Membership
2.1 Membership
Membership will consist of:
The Chief Resource Officer
The Head of Information Compliance and Data Protection Officer
The Director of IT
Head of Planning
Director of HR
Head of Admissions
Assistant Director of Estates Finance, Risk and Administration
Research Integrity Manager
Author: Info-Comp (EP) Classification: Open Version: 1 (May 19)
Representative from both LTS & SSS
Representative from research
Terms of Reference
1. Purpose
The purpose of the Group is to encourage the effective management of University information in all formats, locations and lifecycle stages, in order to meet operational, legal and regulatory requirements, and to support the University in identifying and managing its information needs, risks and responsibilities.
In this context, information compliance includes data protection, freedom of information and records management.
The Group will not have oversight of IT security issues, but acknowledges that security of data is critical to information compliance. Issues concerning IT security may be brought to the Group for information only.
The Group will:
Provide a focal point for the resolution and discussion of information compliance issues
Review the University’s policies and procedures in relation to information compliance
Monitor the effectiveness of the University’s activities in relation to achieving and maintaining compliance with relevant legislation
Receive and consider reports on incidents and breaches of the legislation, and monitor any remedial action
Communicate and guide the University’s commitment to privacy by design and by default
Coordinate and communicate any identified risks or concerns associated with information to the appropriate University body
Prioritise and promote information compliance initiatives
Understand and document the scope of information compliance within the University
Agree and coordinate actions to change the culture of information compliance within the University
2. Composition
2.1 Membership
Membership will consist of:
The Chief Resource Officer
The Head of Information Compliance and Data Protection Officer
The Director of IT
Head of Planning
Director of HR
Head of Admissions
Assistant Director of Estates Finance, Risk and Administration
Research Integrity Manager
Author: Info-Comp (EP) Classification: Open Version: 1 (May 19)
Representative from both LTS & SSS
Representative from research
2.1.1 Chair
The Chair will be the Chief Resource Officer.
2.1.2 Invited members
The Group may co-opt additional members who they consider have particular skills and experience that would assist the work of the Group.
2.3 Attendance
All members of the Group are required to attend meetings or send representation in their absence for continuity purposes.
3. Meetings
3.1 Frequency
The Group will meet quarterly.
3.2 Agenda and Papers
The meeting agenda and supporting papers will be distributed at least five working days in advance of the meetings to allow time for review and consideration. All documentation will follow University templates published here: https://portal.uea.ac.uk/committee-office/uea-committee-agenda-minute-and-report-templates
3.3 Minutes
Formal minutes will be kept of the proceedings and submitted for approval at the next Group meeting. Minutes will be retained according to the Information Compliance Records Retention Schedule.
4. Management & Accountability
The Chair is a member of the Executive Team, which has responsibility for ensuring the University meets its legal obligations on behalf of Council.
The Group will report to the Executive Team.
Members may otherwise report the Group’s activities and progress to other University boards or committees as appropriate.
The Group shall review its own performance, effectiveness, and terms of reference on an annual basis.