DATA PROTECTION LEGAL ADVISER

What we do

The International Committee of the Red Cross (ICRC) works worldwide to provide humanitarian assistance to people affected by conflict and armed violence. We take action in response to emergencies and at the same time promote respect for international humanitarian law. We are an independent and neutral organization, and our mandate stems essentially from the Geneva Conventions of 1949. We work closely with National Red Cross and Red Crescent Societies and with their International Federation in order to ensure a concerted, rational and rapid humanitarian response to the needs of the victims of armed conflict or any other situation of internal violence. We direct and coordinate the international activities conducted in these situations.

Purpose

The Data Protection Legal Adviser provides specific legal, regulatory and compliance advice on data protection issues to divisions and delegations across the ICRC, with particular reference to the Protection Activities of the ICRC. S/he ensures that they effectively implement the ICRC Compliance Framework on Personal Data Protection, including the ICRC Rules on Personal Data Protection, and handles a wide range of data protection questions concerning broad strategy, specific programmes and applicable legal frameworks, as well as individual subject access requests.

Accountabilities & Functional responsibilities

• Provides accurate, timely and practical legal, regulatory and compliance advice to ICRC divisions and delegations, and to other components of the International Red Cross and Red Crescent Movement as required, on various legal aspects of data protection and a wide range of related issues, including on all questions concerning the application of the ICRC Rules on Personal Data Protection in ICRC programmes, on compliance with domestic, regional and international legal data protection frameworks, such as the Council of Europe Convention (No. 108) for the Protection of Individuals with Regard to Automatic Processing of Personal Data and the European Union General Data Protection Regulation, and, more generally, on the processing of personal data. The position has a particular focus on the Protection Activities of the ICRC.
• Plans, coordinates and implements the effective application of the ICRC Rules on Personal Data Protection. This involves, in particular, working closely with divisions and delegations in the areas of operations and administration to align their guidelines and policies, in accordance with the divisions' specific action plans.
• Monitors implementation of the requirements related to data protection by design and by default and data security.
• Advises on all questions regarding the application of the ICRC Rules on Personal Data Protection arising from ICRC programmes, and, more generally, the processing of personal data. This includes creating/updating privacy information notices for data subjects, terms of use for processing tools and processing/transfer agreements with third parties, as well as drafting/advising on data protection law aspects of contracts, memoranda of understanding, headquarters agreements, and giving guidance on the implications of domestic legislation on interaction with partners, etc.
• Advises on and ensures that data protection impact assessments are carried out correctly by the ICRC staff in charge.
• Delivers training, knowledge management activities and presentations for ICRC staff and other components of the Movement on data protection, in particular on data transfers and the application of relevant legal frameworks, as required.
• Maintains comprehensive knowledge of recent legal and policy developments in the field of data protection, and ensures that the ICRC is aware of their implications.
• Assists the Head of Data Protection Office in managing the data protection aspects of data breaches.
• Assists the Head of Data Protection Office in handling data protection complaints by data subjects.
• If necessary, provides guidance to National Red Cross and Red Crescent Societies on data protection law matters, including on domestic legislation, Movement codes of conduct and new technologies.

Reports to (role)

• Head of Data Protection Office

People management responsibilities

No

Scope & Impact

• Geographic remit: global.
• Supervises one associate (trainee), as required.

Certifications / Education required

• Bachelor's degree in law and master's degree in law, international law or human rights law or equivalent.
• Knowledge of data protection laws is required - Data Protection Officer certification is an asset.
• Admission to practise law an asset.
• Fluent command of English required / Fluent command of French is an asset.
• Computer proficiency.

Professional Experience required

• Typically 10-12 years' overall professional experience
• Minimum 5 years' experience as a legal adviser/attorney.
• Minimum 2 years' experience advising on data protection/privacy matters.
• Operational experience in the humanitarian sector as Protection programme coordinator/manager within a recognized international organization.
• ICRC experience is an asset

Desired profile and skills

• Strongly motivated by humanitarian work
• Able to work under pressure
• Analytical skills
• Good communicator

Additional information

• Location :                           Geneva
• Type of contract :               CDMax
• Activity rate :                      100%
• Length of assignment :      Until December 2019
• Estimated start date :         ASAP
• Application deadline :     28.10.2018