Governance
Why the Information Officer function needs a cadence.
The first weeks of a privacy engagement look like a project: processing records, policies, a manual, a training session. That work is necessary. It is not the function.
The function is what happens next. A data-subject request arrives. A new supplier is added. A system is replaced. Staff turn over. The annual PAIA report window opens. The board asks whether the programme is still true.
Most mid-market organisations do not need a full-time privacy officer. They do need a named rhythm — monthly or quarterly — so the programme does not age into fiction. That is the work a retained Information Officer or Deputy is for.