Position type: Consultancy

Location: Somalia Division/Equivalent: Nairobi Regn’l(ESARO)

Application close: Jan 31 2022

UNICEF works in some of the world’s toughest places, to reach the world’s most disadvantaged children. To save their lives. To defend their rights. To help them fulfill their potential.

Across 190 countries and territories, we work for every child, everywhere, every day, to build a better world for everyone.

How can you make a difference?

Scope of Work:

1. Review the concept note and the design documents of the USR to understand its scope of operations.

This will include understanding the various actors and their roles in the operation of the USR, and what data they would need in performing those roles. The consultant will review the data flow processes to understand the way in which data moves within, and in and out of the USR, and how this data flow might have an impact on data security and protection of beneficiary data. The consultant will also speak to the firm developing the USR to gain a detailed understanding of the USR design. The consultant will assess data protection risks and benefits of the original design perform initial and if appropriate enhanced risk assessment. This will include the following: Performance of initial personal data risk assessment probing into questions such as: what types of data will be captured and processed; whose data? For what purposes; how captured; who will have access; data transmission channels; where, how and for how long will the data be retained, etc.

then perform enhanced risk assessment where risks and benefits are weighted, solutions are probed into to minimize the risks (political, economic, social, emotional, economic, etc.) to individuals;

the risk assessments should provide specific guidance on measures to be taken to make sure privacy by design is built into the project and finished product.

2. Undertake a series of consultations with the relevant stakeholders of the USR including WFP and the consultants drafting the legislation for the data protection bill for Somalia

The purpose of these engagements to understand the specific data requirements for the transfer of data from WFP to the USR [1] and to get a high-level understanding and appreciation of the impending foundational legislation and the principles underpinning its evolution to inform the development of data security and data protection guidelines for the USR’s operation. These consultations will also enable the consultant to understand the risk associated with the USR operations in the context of Somalia from the perspective of these stakeholders to put in place the needed mitigating measures using these guidelines

3. Draft the data privacy and data security guideline for the USR that highlights how the management of the USR shall uphold the data protection principles across all areas of its operations.

Though the initial concept design of the USR has been completed, the detailed operational procedures are yet to be developed and will run concurrently with this assignment. The data privacy and data security guideline will be influenced by the final draft of the detailed USR operational procedures and guide its finalization.

The draft the guideline will cover the entire operations of the USR, including any agencies that would be contracted to perform data collections activities. It will provide detailed guidelines for the various user roles identified in the USR, guidelines for ensuring that the IT systems are regularly checked, and actions taken to ensure robust cybersecurity, and guidelines for sharing data with other stakeholders and partners.

4 . Present the data protection guidelines to the relevant stakeholder forums for feedback and validation.

Develop a briefing note and PowerPoint presentation for an engagement with relevant stakeholders to share the guidelines and obtain feedback and validation. Revise the draft guideline based on the inputs from the stakeholders and provide technical support to MoLSA to gain the needed approval for this guideline from the FGS.

5. Develop training materials for training contracted enumerators and new on-boarded staff on the data security and data protection guidelines and train the USR staff to be able to deliver this training.

This component will develop power point presentations to cover both the fundamental aspects of data privacy and data protection as well as the applicable aspects of the USR data protection guideline for potential subcontractors, users, and staff members of the USR. the consultant will conduct a three-day ToT for the USR staff using the materials developed.

Tasks/Milestone:

Deliverables/Outputs:

Timeline

An inception report which maps out the data flows and identified risks based on a review of USR design documents

Inception

5 days (Feb 2022)

A report on the learnings from the consultations and implications for the development of the USR

Report on USR consultations

10 days (March 2022)

Draft data privacy and data protection guideline for the USR

Draft Data privacy and protection guideline

20 days (April 2022)

Briefing note and power point presentation on the guideline for stakeholder validation

Presentation

5 days (May 2022)

Final version of the data privacy and data protection guideline that have been approved by the FGS

Final report- guideline data protection

5 days (May 2022)

Training Deck in PowerPoint on data privacy and data protection for 3-day training for USR satff

Presentation

10 days (May 2022)

To qualify as an advocate for every child you will have…

• • A qualified lawyer with an academic degree at master’s level or higher, preferably on data protection law.
  • At least 7 years’ experience in conducting data compliance reviews and audits for organizations. c437oMb Dgn9Vw
  • Demonstrated deep knowledge of data privacy, data protection and data security issues.
  • Strong technical knowledge/expertise on data security and data protection.
  • Prior experience in developing data protection guidelines for social registries, beneficiary registries and cash transfer programmes.
  • Fluency in written and spoken English is essential
  • Fluency in Somali language is considered an asset