.png)
How to start a career in Information Governance
Information Governance offers a varied and rewarding career for people interested in data protection, privacy, information rights and responsible information management.
It is also a career that can be entered from a number of different directions. You may already work with personal data in healthcare, local government, HR, compliance, records management, legal services or IT without necessarily considering yourself an Information Governance professional.
So, if you are considering a career in Information Governance in the UK, what skills do you need, what does the work involve and where should you start?
What is Information Governance?
Information Governance, often shortened to IG, is the framework organisations use to manage information appropriately throughout its lifecycle.
It brings together areas including data protection, confidentiality, information security, records management, information sharing and information rights.
For those working in Information Governance, this means helping organisations use information effectively while ensuring it is collected, stored, shared, retained and disposed of appropriately.
In the UK, a good understanding of legislation such as the UK GDPR and Data Protection Act 2018 is therefore an important part of developing a career in the field.
What does an Information Governance professional do?
There isn't one standard Information Governance role. Responsibilities vary depending on the organisation, sector and level of seniority.
An Information Governance professional may be involved in:
Responding to Subject Access Requests (SARs)
Supporting Data Protection Impact Assessments (DPIAs)
Advising colleagues on data protection and confidentiality
Managing or investigating personal data breaches
Supporting information sharing decisions
Developing policies and procedures
Managing records and retention requirements
Responding to Freedom of Information requests
Providing data protection and Information Governance training
Identifying and managing information risks
As you become more experienced, the role can become increasingly advisory. Rather than simply following a process, you may be asked to interpret requirements, assess risks and help different parts of an organisation decide how information can be used appropriately.
What Information Governance jobs are available?
Information Governance offers a range of roles across both the public and private sectors, including:
Information Governance Officer
Data Protection Officer
Information Governance Manager
Data Protection Manager
Information Compliance Officer
Privacy Officer
Information Governance Lead
Head of Information Governance
There isn't necessarily one set career path. Someone might move into Information Governance from records management, administration or compliance, while another person may enter through cyber security, legal services or data protection.
What skills do you need for a career in Information Governance?
Knowing the legislation is important, but a successful career in Information Governance requires more than being able to quote the UK GDPR.
A strong grounding in UK data protection law is valuable, including data protection principles, lawful bases, individual rights, transparency and accountability.
As you progress, you may need to apply these principles to increasingly complex situations rather than simply understanding them in theory.
Handling information rights
Subject Access Requests and other information rights are a common part of many Information Governance roles.
Understanding how requests should be identified, managed and responded to is useful, alongside knowledge of other relevant legislation such as the Freedom of Information Act where applicable.
Assessing information risk
Information Governance professionals regularly have to consider risk, whether completing a DPIA for a new system, responding to a personal data breach or considering whether information should be shared.
Being able to identify a risk is important, but being able to recommend a practical way of managing it is equally valuable.
Communication
Some of the most important Information Governance skills aren't purely technical.
You may understand the legislation perfectly, but you also need to be able to explain it to somebody who doesn't. Being able to turn complex requirements into clear, practical advice is an important skill to develop.
Do you need a qualification to work in Information Governance?
There isn't one qualification that everyone working in Information Governance must have.
People enter the profession with a wide variety of backgrounds, experience and qualifications. Practical experience can be particularly valuable because it teaches you how data protection requirements work in real situations.
Professional Information Governance and data protection training can, however, help you build a more structured understanding of the subject, particularly if you are moving into Information Governance from another role or looking to progress
into a more senior practitioner position.
When comparing Information Governance courses, consider the depth of the content, the level at which it is taught, who delivers the training, the time commitment involved and whether you receive a recognised professional credential on completion.
For those ready to take the next step, our BCS Tech10 Accredited IG Practitioner course provides structured learning over five months, helping you strengthen your practical IG knowledge while working towards a recognised BCS credential.
How can you gain experience in Information Governance?
You may have more relevant experience than you think.
If you already deal with personal or sensitive information as part of your job, look for opportunities to become involved with Information Governance activities within your organisation.
This could include:
Supporting Subject Access Requests
Contributing to a DPIA
Reviewing a privacy notice or policy
Assisting with records management
Supporting internal data protection training
Learning how your organisation responds to data breaches
Working alongside your Data Protection Officer or Information Governance team
This can help bridge the gap between understanding data protection in theory and knowing how to apply it when situations are less straightforward.
Taking the next step in your Information Governance career
If you're ready to develop your Information Governance knowledge further, the BCS Tech10 Accredited IG Practitioner course provides structured practitioner-level learning designed to help you move beyond simply understanding the rules and develop the confidence to apply them in practice.
Delivered over five months, with tutor-led sessions every other week, the programme allows you to develop your knowledge alongside your existing role. Successful completion provides a BCS badge and 78 CPD points.
Whether you're starting to specialise in Information Governance or strengthening the knowledge you already use in your role, combining practical experience with professional development can give you a strong foundation for the next stage of your career.
Comments