Information Management 724/2025

FOI Reference: 724/2025

Request:

1. Name of organisation SIRO (Senior Information Risk Owner) or similar post (Chief Information Governance Officer etc), or responsible person for SIRO duties.
2. Contact email of person named in request No. 1.
3. Name of organisation DPO (Data Protection Officer) or responsible person for DPO duties.
4. Contact email of DPO.
5. Nominated Caldicott Guardian.
6. Contact email of Caldicott Guardian.
7. Have you appointed, or do you plan on appointing or delegating the position of IAO to any employees?
8. Who is responsible for the leading IAO structure, I.E. the SIRO/'Lead' IAO/Head of Governance/Head of Corporate Services etc?
9. Who is responsible for reviewing and implementing any training needs for the IAO's?
10. Spend on external IAO training over the past 5 years, per year (financial year), or is the training delivered internally (if at all)?
11. Are you or have you considered becoming ISO 27001 compliant or certified?
12. Following on from Q11, if so whom is/would be responsible for implementation or exploration of ISO 27001? (as in, the person/job title) If possible, please also include the date this information was last updated or reviewed.

Response 1&2:

I can confirm that Dyfed-Powys Police does hold the information requested, the details of which are as follows:

T/DCC Gary Phillips

[email protected]

Response 3&4:

I can confirm that Dyfed-Powys Police does hold the information requested, the details of which are as follows:

Debby Jones

[email protected]

Response 5&6:

I can confirm that there is no information held/recorded by Dyfed Powys police as we do not have a Caldicott Guardian.

Response 7:

I can confirm that Dyfed-Powys Police does hold the information requested, the details of which are as follows:

Dyfed Powys police has a number of Information Asset Owners

Response 8:

I can confirm that Dyfed-Powys Police does hold the information requested, the details of which are as follows:

SIRO

Response 9:

I can confirm that Dyfed-Powys Police does hold the information requested, the details of which are as follows:

Information Manager/Data Protection Officer and the Records and Data Quality Supervisor

Response 10:

I can confirm that Dyfed-Powys Police does hold the information requested, the details of which are as follows:

Spend of external IAO training over the last 5 financial years:

Response 11:

I can confirm that Dyfed-Powys Police does hold the information requested, the details of which are as follows:

Dyfed Powys Police has not achieved ISO 27001 compliance but has previously considered undertaking the process.

Response 12:

I can confirm that Dyfed-Powys Police does hold the information requested, the details of which are as follows:

The Information Security Officer and the  Information Manager/Data Protection Officer. 

This was explored a number of years ago, probably pre-2020. We have received adverts since then.                                     

(This is a response under the Freedom of Information Act 2000 and disclosed on 17/09/2025)