Data Protection Legal Consultant at UN-Habitat

Duties and responsibilities:

• Evaluation of legal requirements for data protection and IT security in Namibia including:
• All draft and promulgated legislation
• The requirements for different types of organization (public, private, non-profit, international, etc)
• The requirements for different types of data (statistical, spatial, personal, etc)
• Evaluation of legal requirements for data protection and IT security specific to the project and partner organizations.
• Evaluation of data sharing agreements and development of data sharing agreement template for use in this and similar projects in the future.
• Recommendations such as Data impact assessment and there by produce a template to be used by the project and other best practices that the team needs to consider.
• Training tailored to the needs of the project team and selected partners.

Qualifications/special skills

• Advanced degree in Legal Studies, IT security, International Law, Data Protection or related subjects is required.
• A minimum of 5 years of experience providing legal council and/or legal interpretation of Data Protection and IT Security requirements for organisations is required.
• Experience in a data protection and privacy function in compliance, risk management, legal, information governance, or a related area is required
• Experience providing legal council and/or consulting to public or private sector organisations in Namibia is required.
• Experience delivering training on legal and ethical considerations of data protection and IT security at an organisational level is desirable.
• Experience in bootstrapping or supporting a data protection and privacy programme for a global organization or international organization is desirable
• Experience in designing and implementing data protection and privacy policies, developing and managing data inventories, managing data subject requests and data breaches, conducting data impact assessments, and monitoring of compliance is desirable
• Strong knowledge of data protection and privacy laws and practices in Namibia and Africa, with a good understanding of other national, regional and international data protection and privacy regulatory frameworks is required.