Data Protection Officer - Mombasa, Kenya - Office of the Data Protection Commissioner

Description

ABOUT THE COMPANY

WHAT WE DO
The Data Protection Act spells out the functions to be carried out by the Office of The Data Protection Commissioner. These include;
Overseeing the implementation of and being responsible for the enforcement of the Data Protection Act.
Establishing and maintaining a register of data controllers and data processors.
Exercising oversight on data processing operations, either of own motion or at the request of a data subject, and verifying whether the processing of data is done in accordance with the Act.
Promoting self-regulation among data controllers and data processors.
Conducting an assessment, on its own initiative of a public or private body, or at the request of a private or public body for the purpose of ascertaining whether the information is processed according to the provisions of the Act or any other relevant law.
Receiving and investigating any complaint by any person on infringements of the rights under the Act.
Taking such measures as may be necessary to bring the provisions of this Act to the knowledge of the general public.
Carrying out inspections of public and private entities with a view to evaluating the processing of personal data.
Promoting international cooperation in matters relating to data protection and ensuring the country's compliance on data protection obligations under international conventions and agreements.
Undertaking research on developments in data processing of personal data and ensure that there is no significant risk or adverse effect of any developments on the privacy of individuals.
Conducting investigations on own initiative, or on the basis of a complaint made by a data subject or a third party.
Facilitating conciliation, mediation, and negotiations on disputes arising from the Act.

JOB SUMMARY

Requirements for AppointmentFor appointment to this grade, an officer must have;Kenya Certificate of Secondary Education (KCSE) mean grade C+ (Plus) or its approved equivalent from a recognized institution;Bachelor's degree in Law, Information Communication Technology or their equivalent from a recognized and accredited institution;Proficiency in computer applications;Skills and CompetenceAnalytical skills;Interpersonal;Communication skills;Creativity and Innovativeness;Problem solving skills;Risk management skills;Continuous learning skills.

RESPONSIBILITIES

Specific duties and responsibilities at this level will entail:Conduct inspections and periodical audits of the processes and systems of data controllers and data processors;Prepare draft guidelines and carrying out data protection impact assessments;Prepare inspection and compliance reports;Reviewing evidence submitted by data controllers and data processors relating to information, privacy and security safeguards for cross-border data transfers;Receive and process notifications of data breaches from Data Controllers and Data Processors;Any other duties assigned by the Supervisor.

REQUIRED SKILLS

Conflict and complaint resolution, Reporting, Compliance, Office administration, management

REQUIRED EDUCATION

Bachelor's degree