Legal Advisor (Data Protection)

The objective of this consultancy is to strengthen institutional awareness and capacity regarding data protection and information governance through the delivery of targeted training and supporting materials. The consultant is expected to deliver the following outputs: • A finalized training package on the IIMP Data Protection Policy, Standard Operating Procedures (SOPs), and related data protection requirements. • Training presentations, facilitator notes, participant materials, practical exercises, case studies, and supporting guidance documents. • Delivery of tailored staff training sessions on data protection, privacy obligations, information governance, and the secure handling of sensitive information. • Training attendance records and participant feedback summaries, where applicable. • A final training report summarizing: Activities conducted; Training content delivered; Key issues and questions raised during training sessions; Lessons learned; Recommendations for continued implementation, awareness-raising, and capacity-building. Any additional supporting materials necessary to facilitate the implementation and sustainability of the training programme may also be produced as required.

Home-based

1st to 17 July 2026

The consultant will provide expert support and guidance, including but not limited to the following: • Finalize training materials related to the IIMP Data Protection Policy, Standard Operating Procedures (SOPs), and associated data protection frameworks. • Review and update training content to ensure alignment with approved policies, procedures, and applicable data protection requirements. • Develop practical training tools and supporting materials, including presentations, case studies, exercises, guidance notes, quick-reference materials, and participant handouts. • Design and deliver tailored training sessions for IIMP personnel on data protection principles, privacy obligations, information governance, and the handling of sensitive information. • Provide practical guidance on the implementation of data protection policies and procedures within the operational context of the Institution, in particular with respect to the conduct of data impact assessments. • Facilitate discussions and respond to staff questions relating to data protection obligations and best practices. • Identify areas where additional awareness, guidance, or capacity-building may be beneficial and provide recommendations accordingly. • Prepare a final training report summarizing activities undertaken, key observations, participant engagement, and recommendations for continued implementation and awareness-raising.

Advanced university degree (Master’s degree or equivalent) in Law, Data Protection, Privacy Law, International Law, or a related field is required. A minimum of five (5) years of progressively responsible experience in data protection, privacy, information governance, legal advisory services, or related fields is required. Experience developing and delivering training programmes, workshops, or capacity-building activities on data protection, privacy, information governance, or related legal topics is required. Experience working in international organizations, humanitarian settings, human rights contexts, or other complex multi-stakeholder environments is desirable. Experience drafting policies, procedures, guidance materials, or training resources related to data protection and privacy is desirable.

Fluency in English is required.

Not available.