Data Protection Officer at The Nairobi Hospital

About the Role

We invite applications from suitably qualified candidates for the position of Data Protection Officer. You will serve as the primary point of contact within the Hospital for staff members, regulators, and relevant public bodies on all matters related to data protection and privacy compliance.

Key Responsibilities

• Act as the primary point of contact within the Hospital for staff members, regulators, and relevant public bodies on issues related to data protection
• Advise the Hospital and employees on data processing requirements under applicable legislation and other written laws
• Establish a data protection framework and implementation plan, amending existing internal data protection policies, guidelines, and procedures in consultation with key stakeholders
• Develop templates for data collection and assist with data mapping exercises
• Support preparation of privacy statements for each processing operation and ensure privacy statements are provided to data subjects on all Hospital forms, literature, websites, and other communication or data collection mediums
• Promote a culture of data protection compliance across all units of the Hospital
• Collaborate with the Information Security function to maintain records of all data assets and exports
• Maintain and implement a data security incident management plan to ensure timely remediation of incidents, including impact assessments, security breach response, and handling of complaints, claims, and notifications
• Respond to subject access requests in accordance with applicable regulations
• Promptly inform the direct supervisor of possible threats and incidents impacting normal workflow and data processing
• Conduct training sessions with staff members across different Hospital units involved in data handling or processing
• Perform Data Protection Impact Assessments for projects and any new products and services where personal data will be processed
• Proactively conduct audits to ensure compliance and address potential issues regarding data privacy
• Maintain records of all data processing activities carried out by the Hospital
• Serve as a point of contact between the Hospital and regulatory authorities

Location

Nairobi, Kenya