Job Description
Deputy Data Commissioner - Data Protection Compliance, ODPC 2,
One (1) Post - V/NO. 1/2022
An officer at this level will head the Directorate of Data Protection Compliance overseeing three divisions and providing leadership in the development and implementation of guidelines, plans and Strategies on registration of data controllers and data processors, data processing system audits, data protection impact assessment, personal data transfer outside the country and inspections. The officer will also oversight regional offices across
the country. The officer will be responsible to the Data Commissioner.
A. Terms and Conditions of Services
i. Basic salary Kshs. 251,121 - 326,458 PM
ii. House Allowance Kshs. 60,000 PM
iii. Commuter Allowance Kshs. 20,000 PM
iv. Leave Allowance Kshs. 30,000 PA
v. Annual Leave 30 Working days per Financial Year
vi. Medical Cover and other allowances As provided by the ODPC
vii. Terms of service Three (3) year contract renewable once
B. Requirements for Appointment
For appointment to this grade, an officer must have:
i. Seven (7) years’ experience in a related field, three (3) of which should be at
senior management level;
ii. Bachelor’s Degree in any of the following fields: Computer Science, Information
Communication Technology, Informatics, Law or their equivalent from a
recognized and accredited institution;
iii. Master’s Degree in any of the following fields: Computer Science, Information
Communication Technology, Data Science, Information Systems, Informatics,
Law, or equivalent qualifications from a recognized and accredited institution;
iv. Certificate in Systems Audit from a recognized and accredited institution;
v. Certificate in Leadership Development Course from a recognized and accredited
institution;
vi. Membership with relevant professional body of good standing;
vii. Shown merit and ability as reflected in work performance.
C. Duties and Responsibilities
Specific duties and responsibilities at this level will entail:
i. Oversee the development and review of policies, procedures and guidelines to
inform Data Protection Compliance;
ii. Registration of Data Controllers and Data Processors in accordance with Data
Protection Laws;
iii. Certification of Data Controllers and Data Processors in accordance with the
Data Protection Laws;
iv. Establishment and Maintenance of a register of Data Controllers and Data
Processors;
v. Oversight Personal Data Processing Operations in compliance with Data
Protection Laws;
vi. Conduct periodic audits of the process and systems of Data Controllers and
Data Processors to ensure Compliance;
vii. Review and advice on Data Protection Impact Assessment Reports in accordance
with Section 31 of the Data Protection Act, 2019;
viii. Oversee Inspections of Data Controllers and Data Processors on processing of
personal data;
ix. Ensure compliance in relation to transfer of personal data outside the country
in accordance with the Data Protection Laws;
x. Determine the Administrative fines to be imposed for failure to comply with the
Data Protection Laws;
xi. Provide advice to the Data Commissioner and implementation of inspection and
compliance recommendations;
xii. Serve as the Chair of the Data Protection Compliance and Enforcement
Committee;
xiii. Perform any other duties as may be assigned by the Data Commissioner.
D. Core Competencies
The following core competencies and skills will be required
i. Leadership skills;
ii. Management skills;
iii. Presentation skills;
iv. Communications and Negotiation skills;
v. Resource mobilization and management capabilities;
vi. Analytical skills;
vii. Decision making capabilities;
viii. People and Knowledge management;
ix. Creativity and innovativeness.