Senior Data Protection Officer

Senior Data Protection Officer

ORGANIZATIONAL CONTEXT

The Senior Data Protection Officer reports directly to the Senior Legal Coordinator within the Division of International Protection (DIP). He/she provides functional expertise and oversight on data protection, and provides guidance, standards and advice to UNHCR field offices, as well as other sections and divisions in Headquarters, on the processing of personal data of persons of concern, and questions regarding the collection, storage, access to and use of personal data of persons of concern. The incumbent also acts as an advisor to senior management on data protection issues, and represents the Organization to external partners and other stakeholders on data protection doctrine and policy.

The Senior Data Protection Officer is part of the PPLA team, and is relied upon by the Office to plan, lead and coordinate quality, timely and effective data protection guidance, taking into consideration the rights and wellbeing of populations of concern, as well as UNHCR's operational needs. This includes ensuring that UNHCR's operations have the necessary global policies and guidance to respond to data protection issues in ways that ensure the effective functioning of UNHCR's operations and mandate, including maintaining the trust of persons of concern. He/she will also support the formulating of advice and responses to queries related to data protection to outside partners. To achieve this, the incumbent will need to build and maintain effective partnerships with other Sections and Divisions within Headquarters, as well as with UNHCR's country operations, in close cooperation with the Regional Bureaux.

FUNCTIONAL STATEMENT

Accountability
- Data protection principles and best practices as relevant to persons of concern to UNHCR are disseminated and promoted at a global level.
- UNHCR maintains up-to-date, concrete and practical guidance, policies and standards on data protection for personal data of persons of concern, including in response to the use of new technologies and innovations.
- UNHCR¿s protection interventions and operational responses, both at Headquarters and at field level, as well as its guidance to States, partners and other relevant stakeholders, is conducted in accordance with the UNHCR Policy on the Protection of Personal Data of Persons of Concern of 2015, and the UN General Assembly's Guidelines for the Regulation of Computerized Personal Data Files of 1990, as well as other international instruments concerning the protection of personal data and the right to privacy.

Responsibility
- Develop general policy and legal positions, as well as tools and best practices, on data protection for persons of concern, including the finalization and implementation of UNHCR's Operational Guidance on Data Protection.
- Provide prompt, principled and timely guidance, advice and support to UNHCR's Regional Bureaux, Regional Offices and Country Operations, as well as to States, partners and other relevant stakeholders, on a wide range of data protection issues, in accordance with UNHCR Policy on the Protection of Personal Data of Persons of Concern, and, as required, contribute to the development of situation/country-specific guidance.
- Provide advice and support to other Sections and Divisions of Headquarters on standards related to data protection, in particular in the context of global systems (such as proGres and BIMS), and in the context of innovation projects with potential implications for the protection of data of persons of concern.
- Actively encourage and guide Data Controllers in country operations, as well as other stakeholders, to undertake measures aimed at compliance with the UNHCR Data Protection Policy and Operational Guidance.
- Develop and provide training to UNHCR staff and partners on UNHCR's Data Protection Policy, as well as its Operational Guidelines.
- Maintain inventories of information provided by Data Controllers and Data Protection Focal Points, including Data Transfer Agreements, specific instances of data sharing with third parties, Data Protection Impact Assessments, data breach notifications, and complaints by data subjects.
- Provide oversight, and monitor and report on compliance with UNHCR's Data Protection Policy, including through an Annual Data Protection Report, to be submitted through the Head of PPLA and the Director of the Division of International Protection, to the Assistant High Commissioner for Protection.

Authority
- Represent PPLA in meetings within UNHCR and with external counterparts.
- Apply existing doctrine to relevant situations.
- Initiate, design and negotiate new legal and policy positions on data protection, as appropriate.

ESSENTIAL MINIMUM QUALIFICATIONS AND PROFESSIONAL EXPERIENCE REQUIRED
- Advanced university degree in Law/International Law, Political Science with Law as a major subject, with preference for International Law, Human Rights or Refugee Law.
- Minimum 10 years of relevant professional work experience (12 years with university degree).
- Minimum 5 years of working experience in an international capacity.
- Demonstrated knowledge and understanding of privacy and data protection.
- A good understanding of personal data processing activities, and an ability to interpret relevant data protection rules within different working environments and organisational cultures.
- Excellent research, analytical and drafting skills.
- Excellent knowledge of English.

DESIRABLE QUALIFICATIONS & COMPETENCIES
- Experience working on data protection and/or privacy issues in the humanitarian or other sectors.
- A solid understanding of new technologies, including the use of mass communication (SMS) services, cash based interventions, cloud technologies, and data analytics/big data.
- Working knowledge of a second UN language.