Trusted listing
Data Protection Officer
Jubilee Insurance
Nairobi, Kenya
Permanent
Published 2 months ago · Expires 3 weeks from now
Job description
A reputable organization seeks a dedicated individual for this role.
Job Ref. No: JLIL 375
Role Purpose
- The purpose of this role is to establish, implement and enforce a robust Data Protection and compliance framework and systems (policies, processes and tools) to ensure that Jubilee Insurance companies are compliant with the Data Protection Act and Regulations.
- Collaborate with senior management and other key stakeholders to implement the strategic direction for Data
- Protection Function with the Life Company. This involves analyzing market trends, assessing industry dynamics, and identifying opportunities for improvement and growth.
- Keep abreast of regulatory developments and industry initiatives and advise management accordingly.
- Data Privacy Impact Assessments: Conduct privacy impact assessments for new products, processes, or systems that involve the collection and processing of personal data.
- Data Retention Policies: Develop and enforce data retention policies to ensure data is retained only for the necessary period and in accordance with legal requirements.
- Establishing the Data Protection Act Governance, regulatory framework and implementation plan which shall include development of the various required statements and policies.
- Evaluate the existing data protection framework to identify areas of no or partial compliance, maintaining a register of all compliance levels and rectify any issues that may arise.
- Guiding the Company, departments, and all support functions on implementation of Data Protection Act requirements and supporting them to ensure compliance with the Act.
- Regularly training of all internal stakeholders involved in data collection/processing, updating the training as well as conducting specific trainings for specific processing requirements.
- Conducting audits to ensure compliance, accountability and address potential issues proactively.
- Serving as the Data Protection Officer and point of contact between the Companies, the Data Commissioner and other Regulatory Authorities through co-operating with them during inspections and by responding to any complaints or queries raised with regards to Data Protection.
- Monitoring performance and adherence to the requirements to relevant regulation while providing advice on the data protection impact assessment.
- Creating and maintaining a register on comprehensive records of all data processing activities conducted by the company, including the purposes of all processing activities.
- Interfacing with data controllers, data processors and data subjects to inform them about the use of data, the data protection rights, obligations, responsibilit...