Remote Working - International Consultancy - Beneficiary Privacy Impact Assessment (PIA)

.

WFP seeks candidates of the highest integrity and professionalism who share our humanitarian principles.

Selection of staff is made on a competitive basis, and we are committed to promoting diversity and gender balance.

ABOUT WFP

The United Nations World Food Programme is the world's largest humanitarian agency fighting hunger worldwide. The mission of WFP is to help the world achieve Zero Hunger in our lifetimes. Every day, WFP works worldwide to ensure that no child goes to bed hungry and that the poorest and most vulnerable, particularly women and children, can access the nutritious food they need.

ORGANIZATIONAL CONTEXT

SCOPE is WFP’s beneficiary and transfer management platform. The system was established in 2012 to address the need of having one corporate solution to manage beneficiary information and the delivery of assistance. In Sudan, WFP began rolling out the system in 2015 and there are currently 2.5 million beneficiaries (700,000 families) registered in the country. WFP is currently scaling up its registration and digitalisation effort to reach 6 million beneficiaries by 2022.

Managing personal data and identity is sensitive, as misuse of that data may cause harm to the people WFP seeks to assist. Protecting personal data is therefore about protecting people’s life, dignity and integrity. The Privacy Impact Assessment (PIA) is a tool from the WFP Data Protection and Privacy corporate guidance launched in 2017. In the era of massive cybersecurity threats and facing the exponential increase of caseload and personal data collected, a PIA primary objective is to analyse the risks and provide good practices and standards to Country offices regarding the collection, storage and the sharing of personal and sensitive data. Ultimately, a PIA is a tool to provide management with the necessary information to make informed decisions to meet operational needs while preventing data breach and misuse, which could otherwise harm WFP beneficiaries, operations and reputation.

JOB PURPOSE

Under the leadership of the Risk and Compliance Advisor in WFP Sudan in close coordination with the Regional and HQ Humanitarian advisors (Protection, AAP and Inclusion), the PIA Consultant will lead, develop and complete the Privacy Impact Assessments for:

• SCOPE beneficiary management system in Sudan, and the in-kind food distributions, cash and voucher transfers managed through it;
• WFP Complaints and Feedback Mechanism database in Sudan;
• Possible joint programming between SCOPE and the Sudan Family Support Programme (SFSP).

The position is for 2 months and it will be remotely based.

KEY ACCOUNTABILITIES (not all-inclusive)

• Conduct and complete the three Privacy Impact Assessments, as per the guidance in ‘WFP Toolkit to Operationalize Beneficiaries Personal Data Protection, above for WFP operations in Sudan in collaboration with the relevant WFP units. Responsibilities will include:
• Overview of the legal framework on data privacy and protection in Sudan, including:
• Applicability of UN privileges and immunities in the country;
• Domestic legislation and regulations impacting people’s identity (e.g. Know Your Customer regulations; anti-terrorism laws; anti money laundering laws; any other public health or public security law requiring access to personal data); and
• Possible legal obligations for organisations in Sudan to disclose data to Governmental and/or judicial authorities.
• Review of secondary literature and data of relevant humanitarian actors to understand:
• Socio-political situation and relevance of identity and personal data therein.
• Overview of protection issues (e.g. forced displacement, movement restrictions, arbitrary arrest, summary executions, killings, recruitment of children in armed groups, denied access to services) with special focus on those where identity, or lack of identity, or any particular status of the person (e.g. ethnicity, displacement) is a triggering factor.
• List of known or foreseeable actors that might be interested in requesting/accessing/seizing personal data collected by WFP to pursue humanitarian and non-humanitarian purposes.
• Risk of possible unintended use of personal data and consequences on WFP’s beneficiaries.
• Consultations with relevant WFP units, including Programme, Digitalisation, CBT, Protection, IT, VAM and M&E, Risk and Compliance and colleagues working on data protection at the Regional and HQ level.
• Promotion of consultations and focus group discussions conducted by WFP Sudan colleagues with relevant humanitarian agencies (e.g. UNHCR, IOM, OCHA, Protection Cluster), government ministries and affected populations (IDPs and resident communities, disaggregated by gender, age and disability).
• Analysis of data flows in WFP operations.
• Analysis of data quality.
• Data subject rights.
• Country and field-office data security standards.
• Risk analysis overview and recommendations.

STANDARD MINIMUM QUALIFICATIONS

Education: Advanced university degree in one of the following disciplines: law, sciences, information technology, humanitarian assistance, international relations, human rights, political science, or a related field.

Experience: At least 5 years of relevant work experience in the fields of data protection and privacy, human rights law and/or international humanitarian law.

Solid analytical and writing skills;

Team spirit and excellent interpersonal relations.

Knowledge and Skills: Extensive knowledge of data protection and Privacy Impact Assessments. Knowledge of GDPR and experience of Sudan and/or conflict affected countries is an asset.

Languages****: Solid understanding (proficiency/Level C) of English is required

CLOSING DATE

.

Female applicants and qualified applicants from developing countries are especially encouraged to apply

WFP has zero tolerance for discrimination and does not discriminate on the basis of HIV/AIDS status.

No appointment under any kind of contract will be offered to members of the UN Advisory Committee on Administrative and Budgetary Questions (ACABQ), International Civil Service Commission (ICSC), FAO Finance Committee, WFP External Auditor, WFP Audit Committee, Joint Inspection Unit (JIU) and other similar bodies within the United Nations system with oversight responsibilities over WFP, both during their service and within three years of ceasing that service.