Home > FOI 245 – SIRO and Data Protection Officer

FOI 245 – SIRO and Data Protection Officer

The OPCC is asked to provide information about arrangements regarding the Senior Information Risk Owner (SIRO) and other data protection arrangements.

FOI Request

Hi there,

Under the FOIA I’d like to request the following information please (if different to the main Cleveland Police Service).

  1. Name of SIRO / Senior Information Risk Owner, (or person who will be SIRO if current SIRO is planning to leave).
  2. Contact email for SIRO.
  3. Name of Data Protection Officer.
  4. Contact email for DPO.
  5. Do you have Information Asset Owners appointed?
  6. Who would be responsible for organising training IAO’s (If appointed)
  7. Contact email for person named in Q6.
  8. Do you have, have you considered, or do you align yourself towards the ISO 27001 standard?
  9. Who would be responsible for ISO 27001 consideration/implementation/maintenance (if applicable)?
  10. A contact email for person in the answer to Q9.

Thanks in advance.

FOI Response

I can confirm that the Office of the Police and Crime Commissioner for Cleveland does hold this information. Response to each of your questions is provided in numerical order as follows:

  1. Simon Dennis, as the Commissioner’s Monitoring Officer, has overall responsibility for ensuring the lawfulness of the activities of the Commissioner and the Office, including responsibilities akin to those of the SIRO. As the OPCC uses Force networks and information management conventions, the SIRO for Cleveland Police exercises overlapping responsibilities in police information management terms. Enquiries about information compliance matters can be addressed to Mr Dennis or the Data Protection Officer Miss Hannah Smith – see below. [email protected] (Support Officer to Simon Dennis)
  2. Hannah Smith – Commissioners Officer for Communication and Information, OPCC.
  3. [email protected]
  4. Yes.
  5. Simon Dennis and/or Hannah Smith.
  6. As above.
  7. The Office of the Police and Crime Commissioner for Cleveland is committed to adhering to GDPR, the Data Protection Act 2018 and MOPI. Our Data Protection Policy is currently under review and includes a range of information security measures to protect the data of individuals we work with.
  8. Not applicable.
  9. Not applicable.

Date responded: 3 April 2020