Legal Advisor (Data Protection)

Result of Service

The objective of this consultancy is to strengthen institutional awareness and capacity regarding data protection and information governance through the delivery of targeted training and supporting materials. The consultant is expected to deliver the following outputs:

• A finalized training package on the IIMP Data Protection Policy, Standard Operating Procedures (SOPs), and related data protection requirements.
• Training presentations, facilitator notes, participant materials, practical exercises, case studies, and supporting guidance documents.
• Delivery of tailored staff training sessions on data protection, privacy obligations, information governance, and the secure handling of sensitive information.
• Training attendance records and participant feedback summaries, where applicable.
• A final training report summarizing: Activities conducted; Training content delivered; Key issues and questions raised during training sessions; Lessons learned; Recommendations for continued implementation, awareness-raising, and capacity-building. Any additional supporting materials necessary to facilitate the implementation and sustainability of the training programme may also be produced as required.

Work Location

Home-based

Expected duration

1st to 17 July 2026

Duties and Responsibilities

The consultant will provide expert support and guidance, including but not limited to the following:

• Finalize training materials related to the IIMP Data Protection Policy, Standard Operating Procedures (SOPs), and associated data protection frameworks.
• Review and update training content to ensure alignment with approved policies, procedures, and applicable data protection requirements.
• Develop practical training tools and supporting materials, including presentations, case studies, exercises, guidance notes, quick-reference materials, and participant handouts.
• Design and deliver tailored training sessions for IIMP personnel on data protection principles, privacy obligations, information governance, and the handling of sensitive information.
• Provide practical guidance on the implementation of data protection policies and procedures within the operational context of the Institution, in particular with respect to the conduct of data impact assessments.
• Facilitate discussions and respond to staff questions relating to data protection obligations and best practices.
• Identify areas where additional awareness, guidance, or capacity-building may be beneficial and provide recommendations accordingly.
• Prepare a final training report summarizing activities undertaken, key observations, participant engagement, and recommendations for continued implementation and awareness-raising.

Qualifications/special skills

Advanced university degree (Master’...