Under the supervision of the Deputy Director of Division of Management and Administration the Senior Legal and Data Protection & Privacy consultant (hereafter referred to as senior consultant) will be responsible for the day-to-day management of the implementation of the Personal Data Protection Policy as per Implementation Plan and the day-to-day work relating to the Information Governance Project. Moreover, the senior consultant will be responsible for managing the finalization of the Public Access to Information Policy and the Classification Policy and developing procedures, guidance and other documents necessary for the implementation of the Personal Data Protection Policy. The work will also include training of personnel, analytical work and substantive technical support to UN Women offices.
Scope of work
1. Lead the day-to-day implementation of the Personal Data Protection Policy
· Lead the implementation of the Personal Data Protection Policy on a day-to-day basis under the guidance and leadership of the DMA Deputy Director
· Develop data protection and privacy language for UN Women’s contract templates and develop templates for joint controller agreements, data processing agreements and transfer agreements
· Provide technical guidance to UN Women offices in negotiating data protection and privacy clauses with contractual counterparties
· Act as the main point of contact and liaison for all data protection and privacy issues within UN Women and with other UN system organizations and for data subjects
· Liaise with IST and other sections on providing business requirements for creating and maintaining records of processing activities
· Represent UN Women in UN groups and initiatives working with data protection and privacy
· Provide technical advice to UN Women offices on classification of personal data and in coordination with IST on appropriate protection of personal data
· Provide advice and instructions on how to conduct data protection impact assessments (DPIAs)
· Provide guidance to UN Women offices on inserting privacy enhancing activities into their project lifecycles, in consultation with IST
· Provide technical support to UN Women offices in responding to data subjects
· Provide inputs to IST on the requirements for appropriate controls for the protection of personal data
· Develop Procedures/Guidance/Templates, as needed, for developing Records of Processing Activities, data breach management, conducting Data Protection Impact Assessments, data protection by design and by default, privacy notices, handling data subjects’ requests and data sharing
2. Lead and Manage the day-to-day work relating to the Information Governance Project
· Manage the day-to-day work relating to the Information Governance Project under the guidance and leadership of the DMA Deputy Director
· Manage the finalization of the Public Access to Information Policy including revising Policy if needed
· Manage the finalization of the Classification Policy including revising Policy if needed
· Develop any Procedure or Guidance needed in the context of Public Access to Information Policy and the Classification Policy.
· Develop content and present the content at Information Governance Project Board meetings
3. Lead to develop Data protection and privacy procedures and guidance and other documents required for the implementation of the Personal Data Protection Policy
· Develop procedures and guidance as outlined in the Implementation Plan
· Provide advice on whether UN Women needs additional procedures and guidance not identified in the Implementation Plan
· Revise and update existing policy, procedure and guidance (PPGs) related to the implementation and management of data protection and privacy or information in general
· Provide guidance to UN Women offices on the interpretation and implementation of the Personal Data Protection Policy and other policies related to management of information
· Provide inputs to the Records Management Policy and Procedure as these documents relate to personal data
· Provide policy and technical advice to UN Women personnel and managers as requested
· Provide template language for providing privacy notices and obtaining consents.
· Provide template language for other templates as needed for the implementation of the Personal Data Protection Policy
4. Provide technical advice on privacy risk management
· Provide technical advice on appropriate sharing of personal data with external parties (e.g., beneficiaries, partners, vendors and donors)
· Provide technical advice on the response to data incidents involving personal data in collaboration with the Information Security Team.
· Provide technical advice on appropriate access rights to personal data in collaboration with IST and UN Women offices
5. Other work relating to data privacy and protection
· Manage capacity development and knowledge management initiatives related to data protection and privacy in UN Women
· Determine, with relevant stakeholders, training requirements
· Coordinate training and awareness activities for UN Women offices
· Conduct training or awareness raising activities if needed
· Perform other responsibilities relating to data protection and privacy and information management as may be assigned by supervisor.
Job Features
