Subject Access Request (SAR) Operational ManagerNHS
Job summary
We are seeking an experienced and highly motivated Subject Access Request (SAR) Operational Manager to lead and manage the delivery of our Subject Access Request service. This is an exciting opportunity for an individual with strong operational management, information governance, and leadership skills to play a key role in ensuring compliance with data protection legislation while maintaining an excellent service for patients, service users, and stakeholders.
The successful candidate will be responsible for overseeing the end-to-end management of Subject Access Requests, ensuring statutory deadlines are met, service standards are maintained, and continuous improvement initiatives are delivered across the function.
What We Offer
- Opportunity to lead a high-profile and important service.
- Flexible working opportunities where operationally possible.
- NHS Pension Scheme (if applicable).
- Generous annual leave entitlement.
- Learning and development opportunities.
- Access to staff wellbeing support programmes.
Interviews week commencing 7th and 14th September 2026
Main duties of the job
As the Subject Access Request Operational Manager, you will provide operational leadership for a team responsible for processing requests made under the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018.
You will work closely with clinical and non-clinical services, Information Governance, Digital teams, and senior stakeholders to ensure requests are managed efficiently, accurately and in line with legal requirements.
You will also lead on service performance, workforce planning, quality assurance, reporting and the development of policies and procedures that support best practice in records disclosure and information rights management.
Job description
This vacancy is advertised as a time-limited opportunity is expected to be undertaken on a secondment basis for internal applicants.Before applying, internal colleagues must discuss the opportunity with their current line manager to confirm whether they can be released from their substantive role if successful.Release to undertake a secondment is not automatic and must be agreed between the colleague, their current line manager, and the recruiting line manager.
- Lead the day-to-day operational management of the Subject Access Request service.
- Ensure all SARs are processed in accordance with UK GDPR, Data Protection Act 2018 and organisational policies.
- Monitor team performance to ensure statutory timescales and service standards are consistently achieved.
- Manage, support, and develop a team of SAR officers and administrators.
- Implement quality assurance processes to ensure the accuracy and completeness of disclosures.
- Produce and present performance reports, risk assessments, and service improvement plans.
- Develop and maintain strong working relationships with clinical services, corporate departments, and external stakeholders.
- Identify opportunities for process improvement, service transformation, and efficiency savings.
- Manage complex, sensitive, and high-risk information requests and provide expert guidance to staff and managers.
- Support organisational compliance and readiness for audits, investigations, and regulatory reviews.
We are looking for someone who can demonstrate:
Essential Experience
- Significant experience managing Subject Access Requests or Information Rights services.
- Experience leading and managing teams within a complex organisation.
- Strong understanding of UK GDPR, Data Protection Act 2018, confidentiality, and information governance requirements.
- Experience managing operational performance and service delivery against key targets.
- Experience handling complex and sensitive information disclosure matters.
Essential Skills
- Excellent leadership and people management skills.
- Strong communication and stakeholder management abilities.
- Excellent organisational and problem-solving skills.
- Ability to analyse performance data and produce meaningful reports.
- Strong attention to detail and commitment to quality.
Qualifications
- Educated to degree level or equivalent experience.
- Relevant Information Governance, Data Protection or Management qualification, or willingness to work towards one.
Desirable
- Experience within the NHS or healthcare environment.
- ISEB Practitioner Certificate in Data Protection or equivalent qualification.
- Knowledge of healthcare records management practices.
- Experience leading service improvement or transformation projects.
Please note: This role does not meet the minimum criteria for visa sponsorship under the current UK immigration rules, which set specific salary and skill thresholds. As such, we are unable to provide sponsorship for this post. Applicants will therefore need to already have the right to work in the UK to be considered. We include this information at the outset to provide clarity and avoid unnecessary inconvenience for applicants.
If you are applying using a Graduate visa as your right to work, you must have a minimum of 18 months remaining on your visa at time of application.
About us
Working for our organisation
At UHSussex, diversity is our strength, and we want you to feel included to help us always deliver Excellent Care Everywhere, as shown in our Outstanding for Caring CQC rating. Your uniqueness and experiences will be part of our creative and innovative community where everyone is encouraged to succeed. We have a range of staff networks to help break down barriers, and can offer abuddy to help new members settle in. We're proud to be a Disability Confident Employer (Level 3) and a Veteran Aware Trust.