Data Protection Advisor (Band 4T)

A. Background

GIZ – German International Cooperation Agency – supports the German Government in achieving its goals in international cooperation for sustainable development.

About the Digital Transformation Centre Kenya

The Digital Transformation Centre (DTC) Kenya is a bilateral project of
German Development Cooperation established to support the country’s digital transition towards a sustainable and human-centred digital economy and society.

The DTC capitalizes on the existing digital and innovation ecosystem and seeks to strengthen it, while also looking at the wider societal impact of digital technologies. Through establishing of strategic partnerships across a wide spectrum of public, private and civil society actors, the DTC’s engagement can be structured into four action areas:

1. Tech Entrepreneurship, Innovation and Digital skills
   

2. Data Protection
   

3. Data Market, Open Data and Artificial Intelligence
   

4. Digital Economy Ideation Lab
   

About the Data Protection Action Area

The right to privacy has acquired new significance in the digital age. With the ratification of its Data Protection Act in 2019 and the creation of the Office of the Data Protection Commissioner (ODPC) in 2020,
Kenya has made important steps towards ensuring that the privacy of its
citizens is protected online. The DTC supports the ODPC in becoming operational and implementing the new law. It strengthens, among others, the Office’s capacities, supports the development of sector-specific guidelines and the exchange with relevant actors at national, regional and international level.

Given the important role that civil society in Kenya plays when it comes to digital rights and Internet freedoms, the DTC also closely works with CSO to raise awareness about the importance of data protection.
Together with civil society partners it provides targeted training on how
especially groups at risk, such as e.g. women, journalists and human rights defenders, can safely navigate the digital world. Moreover, the DTC also support data processors and controllers – from the private sector but also from government – to implement the data protection standards set out by the new law.

A. Background

GIZ – German International Cooperation Agency – supports the German Government in achieving its goals in international cooperation for sustainable development.

About the Digital Transformation Centre Kenya

The Digital Transformation Centre (DTC) Kenya is a bilateral project of
German Development Cooperation established to support the country’s digital transition towards a sustainable and human-centred digital economy and society.

The DTC capitalizes on the existing digital and innovation ecosystem and seeks to strengthen it, while also looking at the wider societal impact of digital technologies. Through establishing of strategic partnerships across a wide spectrum of public, private and civil society actors, the DTC’s engagement can be structured into four action areas:

1. Tech Entrepreneurship, Innovation and Digital skills
   

2. Data Protection
   

3. Data Market, Open Data and Artificial Intelligence
   

4. Digital Economy Ideation Lab
   

About the Data Protection Action Area

The right to privacy has acquired new significance in the digital age. With the ratification of its Data Protection Act in 2019 and the creation of the Office of the Data Protection Commissioner (ODPC) in 2020,
Kenya has made important steps towards ensuring that the privacy of its
citizens is protected online. The DTC supports the ODPC in becoming operational and implementing the new law. It strengthens, among others, the Office’s capacities, supports the development of sector-specific guidelines and the exchange with relevant actors at national, regional and international level.

Given the important role that civil society in Kenya plays when it comes to digital rights and Internet freedoms, the DTC also closely works with CSO to raise awareness about the importance of data protection.
Together with civil society partners it provides targeted training on how
especially groups at risk, such as e.g. women, journalists and human rights defenders, can safely navigate the digital world. Moreover, the DTC also support data processors and controllers – from the private sector but also from government – to implement the data protection standards set out by the new law.

A. Responsibilities

The Data Protection Advisor is responsible for:

• Supporting the implementation of the DTC’s activities related to data protection.
  
• Developing and fostering partnerships with government, especially the ODPC, private sector, civil society and academia around data protection
  
• Effectively managing a network of local and international project partners, especially from civil society
  
• Steering of consultants and other service providers
  
• Coordinating closely with other development partners and donors to ensure alignment in the provision of support to the ODPC
  
• Support planning, procurement processes, financial management and monitoring of the project activities related to data protection within the DTC
  
• Contribute actively to reports (regular and ad-hoc), PR materials, and other related tasks to reporting and communication.
  

B. Tasks

The Data Protection Advisor will perform the following tasks under disciplinary supervision of the Head of the Data Governance component:

Technical advice for implementation of project activities

• Supporting the implementation of the DTC’s activities related to Data Protection. This includes, e.g.:
  

1. Coordinate the DTC's support to the ODPC, also with regards to other donor and development partners
   

2. Formulate terms of reference for consultancy assignments, among other, on the provision of support to data processors and controllers
   

3. Assist in the preparation of studies and research
   

4. Review, comment and accompany the set-up of financial agreements, especially regarding awareness raising and trainings on digital security for groups at risk
   

5. Support activities by implementing partners, follow-up and ensure that quality results are delivered in a timely manner
   

6. Support training and capacity development workshops on data protection
   

Project management

• Actively support project planning for data protection activities within the DTC
  

• Prepare and manage consultancy assignments and financing agreements, and monitor service providers in completing their tasks
  

• Support study trips between Data Protection Authorities and other relevant actors
  

• Support in monitoring and evaluation (M&E) of project activities, and reporting
  

• Manage meetings and events with partners, service providers and other relevant stakeholders (preparation, implementation, follow-up)
  

• Support knowledge management and public relation of the programme, including documentation of lessons learnt, best practices, case studies and success stories
  

• Support the preparation of communication
  materials and progress updates to BMZ and other stakeholders

Partnerships and network management

• Initiate and foster partnerships with government, private sector, academia, and civil society actors in Kenya and beyond for the project in the area of data protection
  
• Manage a network of project partners consisting of Kenyan stakeholders as well as international partners
  
• Support in keeping positive and productive relations with implementing partners, and other stakeholders
  

Other duties/additional tasks

• Performs other duties and tasks as assigned
  

C. Profile

The Data Protection Advisor should have the following qualifications, competences and experiences;

Qualifications

• Master’s Degree in Law or associated fields like International Human Rights Law
  

Professional experience

• At least 3-5 years of work experience in the area of data protection, preferably in an advisory role
  

• Very good understanding of data protection law, especially the Kenyan Data Protection Act
  

• Substantial experience in project management (conceptualisation, planning, coordination, steering, monitoring)
  

• Proven skills and experience in networking and fostering partnerships. An existing network in the area of data protection in Kenya, and internationally is desirable
  

• Experience in working with and/or advising government institutions on digital topics, preferably on questions of data protection
  

• Knowledge of international data protection standards such as GDPR or Convention 108+ are an advantage
  

• Work experience in development cooperation is desired
  

Other knowledge, additional competence

• Excellent communication and presentation skills
  
• Demonstrated ability to communicate in both written and spoken
  English at high level. Knowledge of Kiswahili is an advantage
• Ability and willingness to work in a dynamic team under minimal
  supervision
• Strong interpersonal skills and a willingness to
  cooperate effectively with colleagues and partners
• Self-starter, who works independently and has a flexible
  attitude but is a strong team player simultaneously
• Very good working knowledge of ICT technologies
  (related software, phone, email, internet), Excel and other computer
  applications (e.g. MS Office);

D. Duration of Assignment

The duration of the assignment will be until 30th November 2025.

E. Duty location

The duty location is Nairobi.

F. Submission of Application

Vacancy Reference Number: GIZ/DTC/01/03/2024

GIZ is an equal opportunity employer and applicants abled differently are highly encouraged to apply.

All applications should be received by 2nd April 2024.

Only shortlisted candidates will be contacted.