Call for Expression of Interest: Personal Data Protection Expert

Metamorphosis Foundation has been at the forefront of the promotion of human rights online – helping communities face the enormous changes that stem from the increased impact of new technologies and threated the violation of personal data.

Metamorphosis commits its Human Rights Online programme to the development of democracy and improvement of the quality of life through innovative application and dissemination of knowledge, and supports the use of new technologies for creating new spaces enabling a public debate and exchange of objective information, alongside with the efforts for increasing digital literacy and personal data protection. Metamorphosis has contributed to the development of the Law on Personal Data Protection and is dedicated to monitoring its implementation as well as providing support to institutions and the general public alike in ensuring complete protection of privacy, as a fundamental right.

  1. Objective

With the aim to promote the enforcement of the Law on Personal Data Protection in the designing and use of digital services, so as to make them safer and more accessible to all citizens, especially to members of marginalized groups affected by digital divides, in the framework of the Human Rights Online programme, Metamorphosis Foundation opens a call for engagement of a Personal Data Protection expert.

  1. Tasks, Responsibilities and Timeline

The Personal Data Protection Expert will be engaged to support the programme objective described above. The tasks and responsibilities of the Expert are divided into 3 components:

1) Research

Within this component, the expert is expected to complete the following activities:

  • Mapping digital services provided by government institutions and government services that are currently being digitalized and/or are expected to be digitalized by June 2022;
  • Developing methodology for assessing the compliance of the provision of digital services by the government institutions in North Macedonia with the Law on Personal Data Protection.
  • Assessing the compliance of digital services provided by the government institutions in North Macedonia with the Law on Personal Data Protection and selecting a set of services that will be supported in the process of developing Privacy Impact Assessment.

The research component is expected to start as soon as possible and to be completed by the end of January 2022.

 

2) Training

Within this component, the expert is expected to complete the following activities:

  • Planning and implementing 2-day training for Data Protection Officers for the ICT challenges, artificial intelligence and risk management in regards to privacy protection;
  • Planning and implementing 2-day training for CSO representatives and journalists on challenges and risks related to privacy protection and artificial intelligence.

The trainings are expected to take place by February 2022.

 

3) Mentorship

Within this component, the expert is expected to complete the following activity:

  • Providing customized mentor support to 5-10 government institutions in the development of privacy policies and procedures and implementation of privacy-impact-assessments.

The mentor support should be provided between February and April 2022.

The expert will collaborate closely with the Metamorphosis team. Metamorphosis Foundation will support the expert with all available resources and contacts during the engagement timeframe.

  1. Qualifications

The Expert is expected to fulfil the following criteria:

– At least 5 years of relevant work experience in the area of Personal Data Protection;

-At least 1 year experience as a trainer.

– Excellent analytical skills.

 

  1. Application and Timeline

Interested applicants need to submit their professional resume (CV) which will showcase their previous experience, skills and qualifications and a timeline of planned activities and a financial offer to [email protected], not later than December 12th, 2021. The experts may apply individually, or in a team of maximum 4 members. If the second case, the team should assign a team leader that will submit (a) the professional resumes of all team members, (b) the scope of work for each team member, (c) a timeline of planned activities and (d) financial offer and the manner in which the remuneration should be transferred to the respective team members.

The financial offer may not exceed the gross amount of USD 5500

The expert/team of experts will be engaged for 22 working days between December 2021 and April 2022. Short-listed candidates may be contacted for additional information relevant to this call. After the completion of the selection procedure, all applicants will be informed on the status of their application.

  1. Selection criteria

The assessment of the applications will be done in the following manner, adding up to 100 points in total:

Subject matter and training expertise (65 points)

– CV assessed for subject-matter expertise (45 points) and training experience (20 points)

 

Financial offer (35 points)

– a financial offer assessing lowest prices as most favourable for this category (35)

 

  1. Deliverables

The Expert is expected to deliver the following outputs:

1)Research component

  • Report of mapping digital services provided by government institutions and government services that are currently being digitalized and/or are expected to be digitalized by June 2022;
  • Methodology for assessing the compliance of the provision of digital services by the government institutions in North Macedonia with the Law on Personal Data Protection and
  • Assessment of the compliance of digital services provided by the government institutions in North Macedonia with the Law on Personal Data Protection.

 

2) Training component

  • Report on the training for Data Protection Officers for the ICT challenges, artificial intelligence and risk management in regards to privacy protection;
  • Report on the training for CSO representatives and journalists on challenges and risks related to privacy protection and artificial intelligence;
  • Raw data and a report (integrated in the final report of the component) on the pre and post assessment of the trainings;

 

3) Mentorship component

  • Report on provided mentor support to government institutions in the development of privacy policies and procedures and implementation of privacy-impact-assessments.

Сподели на