Background

Data is central to UNDP’s Digital Strategy 2022-2025, playing a critical role in achieving the organisation’s mandate and supporting the Sustainable Development Goals (SDGs). In an era where digital transformation is reshaping how we operate, responsible data collection, management, use, and analysis have become key objectives to UNDP’s overall digital agenda. As part of this strategy, UNDP is committed to becoming a data-driven organisation, ensuring that data is leveraged responsibly and effectively to maximise impact for the communities we serve.

The UNDP Data Strategy aligns with the broader Digital Strategy to build the necessary systems, tools, and processes that promote data as a key asset. The strategy also aims to enhance UNDP’s knowledge management capabilities and cultivate a workforce that is data-literate and equipped with the skills to navigate the evolving digital landscape.

As UNDP continues to embrace digital transformation, safeguarding personal data and ensuring compliance with international data protection standards have become top priorities. Data privacy is crucial not only for protecting the rights of individuals but also for maintaining the trust and integrity of UNDP’s operations globally. UNDP recognises that effective data governance, which includes robust privacy safeguards, is essential for leveraging data ethically and responsibly across all its programmes and activities.

With UNDP’s presence in over 170 countries and its extensive portfolio addressing poverty, climate change, governance, and crisis response, the protection of personal data is of paramount importance. The Data Privacy Specialist will play a pivotal role in ensuring that UNDP’s data handling practices are in full compliance with the United Nations Principles on Personal Data Protection and Privacy, guiding the organisation towards a secure, compliant, and responsible use of data.

Duties and Responsibilities

The Data Privacy Specialist will play a key role in UNDP’s commitment to safeguarding personal data, ensuring compliance with international data protection standards, and enhancing data privacy across its operations and programmes. The incumbent will be responsible for developing and implementing data protection policies, advising senior management on data privacy related matters, conducting privacy risk assessments, managing data breaches, and promoting a culture of data privacy across the organisation.

Duties and Responsibilities

The selected candidate will be responsible for:

Governance and Compliance

• Lead the implementation and review of UNDP’s data protection and privacy policies, ensuring alignment with the United Nations Principles on Personal Data Protection and Privacy.
• Conduct privacy risk assessments and data protection impact assessments, recommending appropriate mitigations.
• Advise senior management on compliance with internal and external data protection regulations, ensuring the organisation adheres to the highest standards of privacy and data security.
• Ensure that appropriate safeguards are in place for data transfers and oversee the development of standard operating procedures related to data retention, deletion, and breach management.
• Provide support in managing and responding to data subject access requests in compliance with relevant regulations.

Data Protection and Risk Management

• Identify and assess data protection and privacy risks across UNDP’s global operations, working with relevant departments to mitigate these risks.
• Lead the development of a data breach management process, ensuring timely notifications and responses to breaches.
• Maintain a repository of data processing activities and support the data mapping efforts to improve oversight of data handling practices within UNDP.

Training and Awareness

• Develop and deliver training programmes aimed at building a strong culture of data protection and privacy within UNDP.
• Provide guidance to staff on the application of data protection principles, including privacy-by-design, data minimisation, and rights of data subjects.
• Raise awareness of data protection obligations, ensuring compliance with the UN’s data protection principles and related best practices.

Monitoring and Reporting

• Establish a monitoring system to ensure ongoing compliance with data protection regulations.
• Report on data privacy compliance to senior management, providing insights and recommendations for improvement based on trends and lessons learned.
• Collaborate with UN agencies to ensure coherence and harmonisation of data protection practices across the UN system.

Stakeholder Engagement

Under the guidance and oversight of the Chief Digital Office, the IPSA holder will:

• Channel internal and external queries related to UNDP data protection and privacy policies.
• Liaise with other UN agencies, legal entities, and external organisations to ensure UNDP’s compliance with evolving data protection and privacy frameworks.
• Represent UNDP in inter-agency working groups related to data protection and privacy.

Competencies

Required Skills and Experience