Data Protection Officer

Establish and maintain appropriate systems and internal control mechanisms that align with the prescribed standards of the Data Protection Act.

Technical/Professional Responsibilities

 Design and implement a comprehensive Data Privacy Governance Framework and strategies to effectively manage the use of personal data in accordance with the provisions of the Data Protection Act.

1. Establish and maintain appropriate systems and internal control mechanisms that align with the prescribed standards of the Data Protection Act.
2. Ensure that the Agency and its operational processes pertaining to data processing adhere to the established data protection standards and regulations.
3. Implement strategies to enhance operational processes and ensure processes comply with regulatory requirements.
4. Design and implement Data Protection policies and procedures within the Agency.
5. Ensure that breaches of the data protection standards or violations of the provisions outlined in the Data Protection Act are addressed promptly.
6. Review and update the Data Protection Plan regularly to ensure it aligns with any changes in laws, regulations, and policies.
7. Ensure the timely collection of data, analysis, and reporting of data on key performance measures.
8. Maintain a robust system to address and respond to queries and complaints.
9. Ensure proper management and maintenance of personal data records, in compliance with data protection standards.
10. Sensitize and train staff on the components of relevant Acts, Regulations, and Policies related to data.
11. Inform data controllers and data subjects about their rights, obligations, and responsibilities regarding data protection.
12. Provide advice and recommendations to staff, the Managing Director, and the Board of Directors regarding the interpretation and application of data protection rules.
13. Collaborate with the MIS Department to ensure compliance with the Data Protection Act in the Agency’s MIS system.
14. Collaborate with the MIS Department to manage data security incidents and ensure timely resolution of issues such as security breaches, complaints, or subject access requests.
15. Provide legislative advice and guidance to the Managing Director regarding any gaps identified from the outcome of the Data Protection and Privacy Impact Assessment.

17.  Liaises with the Office of the Information Commissioner to address data protection matters and clarify or resolve any doubts regarding the application of the act’s provisions

18.     Collaborate with the Corporate Strategic, Internal Audit, Legal Services, and other key stakeholders to monitor, implement and analyze compliance programmes.

19.    Prepare and submit routine and special reports, as required.

20.     Attend and participate in meetings, seminars, workshops, and conferences, as required.

21.  Performs any other related duties that may be assigned periodically.

Minimum Required Qualification and Experience:

• Bachelor’s degree in Law, Computer Science, Audit, Management Information Systems, Statistics, or equivalent qualification from a recognized tertiary institution.
• Experience or knowledge in data privacy legislation.
• Experience or specialized training in records and information management systems.
• Certification in Information Security, Data Protection, and/or Privacy Certification such as CIPP, CIPT, ISEB, etc. (preferred)
• Exposure to legal training.
• Minimum three (3) years related work experience.

Salary -  $4.8M  - $6.4M