Data Protection Officer at The Nairobi Hospital

About the Role

Reporting to the Company Secretary, the successful candidate will be responsible for implementing and enforcing Hospital-wide data protection compliance frameworks and systems to ensure the Hospital complies with all applicable data protection laws and regulations.

Key Responsibilities

• Act as the primary point of contact within the Hospital for staff members, regulators, and relevant public bodies on data protection issues
• Advise the Hospital and employees on data processing requirements under applicable data protection legislation and other written laws
• Establish a comprehensive Data Protection framework and implementation plan, amend existing internal data protection policies, guidelines, and procedures in consultation with key stakeholders, and develop templates for data collection and data mapping assistance
• Support the Hospital in preparing privacy statements for each processing operation and ensure processes are in place to provide privacy statements to data subjects on all Hospital forms, literature, websites, and other communication or data collection mediums
• Promote a culture of data protection compliance across all units of the Hospital
• Collaborate with the Information Security function to maintain records of all data assets and exports, and maintain a data security incident management plan to ensure timely remediation of incidents, including impact assessments, security breach response, complaints, claims, notifications, and responses to subject access requests
• Promptly inform the direct supervisor about possible threats and incidents impacting normal workflow and data processing
• Conduct training sessions with staff members across different Hospital units involved in data handling or processing
• Perform Data Protection Impact Assessments for projects and new products and services where personal data processing is involved

Position Details

Reference: TNH/HHR/DPO/11/2025

Location: Nairobi, Kenya

Reports to: Company Secretary