NHS Information Governance Manager: Pay, Salary, Progression & How to Become

An NHS Information Governance Manager is the specialist who runs a trust's Information Governance (IG) programme, keeping the organisation legally compliant on data protection, confidentiality and information sharing while supporting the safe use of patient data. The role sits within Band 6 to Band 8 on the Agenda for Change pay structure, with Band 7 the standard manager level. NHS Information Governance Manager duties cover delivering the IG programme, advising on data protection law, leading the response to data breaches, delivering training and awareness programmes, managing information requests, carrying out audits and Data Protection Impact Assessments, and drafting data sharing agreements. The role sits inside a structured hierarchy of IG officers, senior IG managers and heads of IG, alongside the Data Protection Officer, Caldicott Guardian and Senior Information Risk Owner.

NHS Information Governance Managers earn between £39,959 and £77,138 annually across Bands 6 to 8b for 2026/27, according to the NHS Terms and Conditions of Service Handbook published by NHS Employers. Band 6 posts pay £39,959 to £48,117, Band 7 posts pay £49,387 to £56,515, Band 8a posts pay £57,528 to £64,750, and Band 8b posts pay £66,718 to £77,138. Progression from IG officer to IG manager runs on evidencing independent handling of subject access requests and breaches, Practitioner Certificate in Data Protection or equivalent, and ownership of Data Security and Protection Toolkit evidence. Unsocial hours rarely apply, and overtime under Agenda for Change is available at Bands 1 to 7.

Take-home pay is calculated after income tax, National Insurance and NHS Pension contributions come off the gross salary. Maternity pay under Section 15 of the NHS Terms and Conditions of Service Handbook covers 8 weeks of full pay, 18 weeks of half pay plus Statutory Maternity Pay, and 13 weeks of Statutory Maternity Pay only. Sick pay under Section 14 tiers with continuous NHS service and reaches 6 months full pay and 6 months half pay after 5 years. Entry into the role runs on demonstrable UK GDPR and Data Protection Act 2018 knowledge, with the BCS or IAPP Practitioner Certificate in Data Protection the recognised credential and the NHS IG apprenticeship at Bands 4 to 5 as a route in without one. Applicable pay depends on the band, whether the post also acts as the statutory Data Protection Officer, and any High Cost Area Supplement in London.

An NHS Information Governance Manager keeps data protection and confidentiality maintained across a healthcare trust. The role covers several core duties spanning legal advice, incident response and training.

• Advising on Data Protection Law — the manager provides expert guidance on UK GDPR and the Data Protection Act 2018, keeping data handling practices matched to legal standards.
• Leading Responses to Data Breaches — the manager leads the response effort during data breaches, coordinating with relevant teams to mitigate risks and prevent recurrence.
• Conducting Training and Awareness Sessions — regular training sessions educate staff on information governance policies and practices, building a culture of data security and awareness.
• Managing Information Requests — the manager oversees the processing of information requests, including subject access and freedom of information requests, keeping responses timely and accurate.
• Conducting Audits and Assessments — regular audits and Data Protection Impact Assessments evaluate the effectiveness of current practices and identify areas for improvement.
• Drafting Data Sharing Agreements — the manager drafts agreements setting out the terms and conditions for sharing data with partner organisations, keeping compliance with data protection laws intact.

An NHS Information Governance Manager is integral to the trust's operations, working alongside key figures such as the Data Protection Officer and the Caldicott Guardian to hold the highest standards of information governance.

NHS Information Governance roles cover a range of positions, each with distinct responsibilities and levels of seniority. The roles secure the legal management of information across the NHS framework.

• Information Governance Officer — officers operate at Bands 4 to 6 including senior officers. They provide frontline support by advising on data protection, sharing and confidentiality day-to-day and preparing responses to information requests.
• Information Governance Manager — managers sit at Bands 6 to 8, with Band 7 as the standard manager role. They own programme delivery, breach response and data sharing agreements across the organisation.
• Senior Information Governance Manager and Head of IG — senior roles at Bands 8a to 8b involve managing a budget and risk registers, reporting to the executive team and carrying line management responsibility.
• Data Protection Officer — operating at Bands 8 to 9, the Data Protection Officer sets IG strategy and policy, oversees high-risk data assessments and leads investigations into complex breaches with senior internal and external stakeholders.
• Caldicott Guardian and Senior Information Risk Owner — governance roles the IG manager serves rather than occupies. The Caldicott Guardian is a senior clinician safeguarding patient confidentiality; the Senior Information Risk Owner is an executive director owning the organisation's information risk on the board.

Each position inside NHS Information Governance plays a role in maintaining the integrity and confidentiality of patient data, keeping compliance with legal standards intact and supporting the overall healthcare delivery system.

An Information Governance Manager inside the NHS oversees the trust's information governance programme, keeping compliance with data protection, confidentiality and information-sharing regulations intact. The role sits at Band 7 as standard, though it ranges from Band 6 to Band 8 depending on the trust's size and complexity. Manager duties cover advising on data protection laws, responding to data breaches, conducting training sessions, managing information requests, performing audits and drafting data-sharing agreements.

An Information Governance Manager acts as the liaison between operational teams and senior governance leadership, such as the Caldicott Guardian and Senior Information Risk Owner. The role sits inside a structured hierarchy of progression from Information Governance Officer to Senior Information Governance Manager and Head of IG, eventually leading to the statutory Data Protection Officer position. The post needs collaboration with cybersecurity and IT teams to keep robust data protection practices across the organisation.

A Data Protection Officer (DPO) is a senior role inside the NHS tasked with overseeing data protection strategy and holding compliance with UK GDPR and the Data Protection Act 2018. The DPO acts as an independent advisor, providing expert guidance on data protection laws and monitoring organisational compliance. Duties cover managing responses to complex data breaches, conducting Data Protection Impact Assessments and serving as the primary contact for the Information Commissioner's Office and data subjects.

Unlike Information Governance Managers who manage day-to-day IG operations, a DPO operates at a strategic level. The DPO offers authoritative advice to senior leadership, challenging decisions that pose compliance risks and holding oversight of the entire IG framework. The role needs advanced knowledge of data protection law, often evidenced through certifications such as the IAPP CIPP/E or CIPM, and demands autonomy to avoid conflicts of interest.

An NHS Information Governance Manager earns between £39,959 and £77,138 annually, depending on the band inside the Agenda for Change pay structure. The salary band for an established manager post is Band 7, where salaries run £49,387 to £56,515. Pay depends on the specific band level, whether the manager also acts as the Data Protection Officer, and any High Cost Area Supplement such as London weighting. The 2026/27 pay scale reflects a 3.3% consolidated uplift from 1 April 2026 under the government's response to the NHS Pay Review Body's recommendation. The headline figure sets up a basis for the band-by-band breakdown that follows.

An NHS Information Governance Manager at Band 6 earns £39,959 to £48,117 per annum for the 2026/27 pay period. The range reflects the entry-level manager position inside the NHS Information Governance structure, where managers take on their first substantial leadership roles. Band 6 managers oversee discrete workstreams such as managing information requests, holding data protection compliance and supporting the delivery of information governance policies.

Band 6 posts build the experience needed to progress to Band 7, the established manager post. As managers gain competence and take on more responsibility, they move through the pay spine with annual increments, reflecting growing expertise and contribution to the NHS's information governance effort.

The salary for a Senior Information Governance Manager or Head of Information Governance inside the NHS sits under the Agenda for Change pay structure. For 2026/27, the roles sit at Band 8a to Band 8b. Band 8a offers £57,528 to £64,750 annually, and Band 8b runs £66,718 to £77,138 annually. The bands reflect the roles' demands for strategic leadership, policy development and risk management across NHS trusts or integrated care boards. Senior managers at these levels oversee information governance teams, keep compliance with data protection regulations such as UK GDPR intact and advise executive boards. The salary range reflects the complexity and accountability inherent in the positions, supporting the trust-wide information governance work programme and providing expert guidance on data security and compliance.

NHS Information Governance Manager pay is determined by the Agenda for Change (AfC) framework. The framework evaluates each role on responsibilities, skills and working conditions, assigning it to a specific pay band. Information Governance Manager roles fall within Bands 6 to 8, with the exact band depending on the scope of responsibilities and level of autonomy. Job evaluation weights legal accountability and freedom to act — Band 6 for delivering IG processes under supervision, Band 7 where the manager advises the organisation independently and owns breach response, Band 8a and above where the post sets strategy, manages budget and risk registers and answers to the executive team. The 2026/27 pay scale sets Band 6 at £39,959 to £48,117, Band 7 at £49,387 to £56,515, Band 8a at £57,528 to £64,750, and Band 8b at £66,718 to £77,138. The bands keep pay consistent and transparent across the NHS, reflecting the complexity and demands of the role.

NHS Information Governance (IG) Manager pay progression follows a structured path within the Agenda for Change framework. An IG Officer progresses to a Band 6 role, and an established IG Manager occupies a Band 7 position. As responsibilities grow, the role advances to Band 8a or Band 8b, reflecting senior IG Manager or Head of IG duties. Progression is determined by the job evaluation outcome, the scope of the programme and whether the role includes the statutory data protection officer function. Increased strategic accountability plays a decisive role.

In practice, progression is driven by increased responsibility rather than time served. An IG Manager leads the IG programme, advises on data protection law, manages breach responses and audits, and oversees complex Data Protection Impact Assessments and sharing agreements. Progression covers moving from support roles to leadership positions inside the IG structure. The transition from operational to strategic roles often marks the move to higher bands, with senior roles carrying broader annual salary packages. High Cost Area Supplement is added where applicable, based on the post's location and employer policies.

The structured progression keeps IG Managers steadily advancing careers by taking on more significant responsibilities and evidencing expertise in data protection and strategic leadership.

Information Governance Managers progress to senior roles by developing strategic leadership and expertise in data protection. Progression covers moving from an IG Manager at Band 7 to a Senior IG Manager at Band 8a, then to Head of IG at Band 8b. The advancement requires managing trust-wide IG programmes, handling high-profile data breaches and advising executive teams on legal compliance under UK GDPR and the Data Protection Act 2018.

The path to a Data Protection Officer (DPO) role at Bands 8 to 9 covers additional qualifications and statutory independence. While IG Managers step up to Head of IG roles, the DPO position is distinct — the role needs formal designation by the trust board and direct reporting lines separate from operational IG delivery. The separation keeps the DPO's independence from day-to-day IG operations, emphasising compliance and legal interpretation.

NHS Information Governance Managers eligible for overtime sit at Band 6 or Band 7. Under Section 3 of the NHS Terms and Conditions of Service Handbook, overtime is calculated at time-and-a-half of basic pay for weekday and Saturday hours and double time for Sundays and public holidays. A Band 7 manager on the top spine point of £56,515 earns approximately £43.35 per hour for weekday overtime and £57.80 per hour for double-time work. Overtime applies when extra hours are pre-approved and fall outside standard working hours.

Band 8a heads of IG fall outside overtime eligibility because Section 3 restricts paid overtime to Bands 1 to 7. Post-holders at Band 8a and above take time off in lieu instead. Overtime earnings contribute to gross pay, which is then subject to income tax, National Insurance and pension deductions to determine take-home pay.

An NHS Information Governance Manager's monthly statutory deductions slip carries three main statutory deductions. Income tax applies at standard UK rates: 20% on income above £12,570 up to £50,270, 40% between £50,271 and £125,140, and 45% above £125,140. National Insurance contributions run at 8% on annual earnings between £12,570 and £50,270 and 2% above that under Class 1 employee rates. NHS Pension Scheme contributions run in tiered bands based on pensionable pay, from 5.2% to 12.5% for 2026/27 under the 2015 Career Average scheme. Combined statutory deductions reduce the gross salary by approximately 25% to 35% depending on earnings and pensionable pay tier.

NHS Information Governance Managers receive sick pay under Section 14 of the NHS Terms and Conditions of Service Handbook. Sick pay entitlement is based on length of continuous NHS service and calculated on a rolling 12-month basis. In the first year of service, employees receive 1 month of full pay followed by 2 months of half pay. After 1 year, entitlement rises to 2 months full and 2 months half.

With 2 years of service, entitlement rises to 4 months full and 4 months half. After 3 years, employees receive 5 months full and 5 months half. Upon reaching 5 years of service, entitlement reaches the maximum of 6 months full pay and 6 months half pay. Section 14 of the Handbook governs sickness absence entitlements for all Agenda for Change roles, including Information Governance positions at Bands 6, 7 and 8.

An NHS Information Governance Manager needs a degree in a relevant field or equivalent professional experience, according to NHS Health Careers. A recognised qualification in information governance or data protection, such as GDPR or IG practitioner training, sits alongside. Trusts shortlist on demonstrable UK GDPR and Data Protection Act 2018 knowledge, with the BCS or IAPP Practitioner Certificate in Data Protection the recognised credential. NHS Health Careers notes the IG apprenticeship at Bands 4 to 5 as a route in without a degree. Senior roles need additional credentials — postgraduate studies, management qualifications or certifications in records management and corporate governance. The qualification route is complemented by hands-on experience in information governance roles inside the NHS.

An NHS Information Governance Manager operates within Band 7 of the Agenda for Change pay scale as standard. Band 7 covers the established responsibilities and scope of the role. Positions vary from Band 6 to Band 8 depending on the size and complexity of the organisation and the level of responsibility. Band 6 covers developmental roles, and Band 8a and Band 8b sit with senior managers overseeing larger teams or multiple sites. Data Protection Officers sit at Bands 8 to 9 above the manager tier.

Largely yes. NHS Information Governance Managers work from home on a hybrid basis, though the specific split depends on the trust and role. Many positions offer flexible working arrangements combining office attendance with remote work. The flexibility reflects the broader NHS shift toward adaptable working environments post-pandemic.

Remote working for NHS Information Governance Managers runs on secure remote access and encrypted devices, keeping compliance with information security protocols intact. Policy work, training design, audits and request handling all run on remote-accessible systems, making IG one of the more hybrid-friendly NHS specialisms. Breach investigations and records inspections need on-site presence, and patient-identifiable material stays on secured trust networks. The extent of home working depends on the role's responsibilities, the trust's IT infrastructure and whether the manager also serves as the statutory Data Protection Officer.