Consultancy Services for the Development of Codes of Practice under Data Protection and Privacy Act, Cap.97 — Uganda Digital Acceleration Project

REQUEST FOR EXPRESSION OF INTEREST

(CONSULTING SERVICES – FIRMS SELECTION)

UGANDA

UGANDA DIGITAL ACCELERATION PROJECT – GOVERNMENT NETWORK (UDAP-GOVNET)

PROJECT ID -P171305

LOAN NUMBER: IDA-68980

REFERENCE NUMBER: NITA-UDAP/CONS/25-26/00052

ASSIGNMENT TITLE: CONSULTANCY SERVICES FOR THE DEVELOPMENT OF CODES OF PRACTICE UNDER THE DATA PROTECTION AND PRIVACY ACT, CAP.97.

The Government of Uganda, represented by the National Information Technology Authority - Uganda (NITA-U), has received financing from the World Bank towards the cost of the Uganda Digital Acceleration Project - Government Network (UDAP-GOVNET) and intends to apply part of the proceeds for Consulting services for the development of codes of practice under the data protection and privacy act, cap.97

The consulting services (“the Services”) include development of codes of practice under the data protection and privacy act, cap.97. The overall objective of the assignment is to develop five sector specific Codes of Practice under the Data Protection and Privacy Act, Cap. 97 and its Regulations, covering the public sector, education sector, journalists, bloggers and social media influencers, mobile money and banking agents, and civil society.

The Implementation period of the assignment is 45 Weeks from the date of signing the contract.

The detailed Terms of Reference (TOR) for the assignment can be found at the following website: https://www.nita.go.ug/opportunities/bids-and-tenders

The National Information Technology Authority - Uganda now invites eligible consulting firms (“Consultants”) to indicate their interest in providing the services. Interested Consultants should provide information demonstrating that they have the required qualifications and relevant experience to perform the Services.

The Shortlisting Criteria for the firm’s capacity and experience are:

• The firm must demonstrate at least five (5) years of experience in data protection and privacy law or regulation; development of sector-specific regulatory compliance frameworks, codes of practice or regulatory guidance instruments in a closely related field including financial services, telecommunications, health, consumer protection & digital governance
• Submit the firm’s organogram to demonstrate the firm’s technical and managerial capability;
• The firm must demonstrate successful completion of at least two (2) assignments involving any of the following, development of sector-specific regulatory compliance frameworks, codes of practice, regulatory guidance instruments or comparable deliverables, of which at least one (1) must be in data protection, privacy, data governance, digital regulation or a closely related field.
• Presence of appropriate skills among staff in the area of data protection, Team Leader/Legal Advisor in Data Protection and Privacy, Information Security Expert, Change Management Expert, Monitoring and Evaluation Expert, and Legal Advisor in Legislative Drafting.

The attention of interested consultants is drawn to Section III, paragraphs 3.14, 3.16, and 3.17 of the World Bank’s ‘Procurement in Investment Project Financing Goods, Works, Non-Consulting and Consulting Services, Fifth Edition September 2023 (Procurement in investment Project Financing; Goods, Works, Non-Consulting and Consulting Services), setting forth the World Bank’s policy on conflict of interest.

Consultants may associate with other firms to enhance their qualifications, but should indicate clearly whether the association is in the form of a joint venture and/or a sub-consultancy. In the case of a joint venture, all the partners in the joint venture shall be jointly and severally liable for the entire contract, if selected.

A consultant will be selected in accordance with the Consultant Qualification Selection method set out in the World Bank Procurement Regulations “Procurement in Investment Project Financing Goods, Works, Non-Consulting and Consulting Services, Fifth Edition September 2023”.

Further information can be obtained at the address below during office hours at the address below 08:00 to 17:00 hours from Monday to Friday at the address given below.

Expressions of Interest (One original plus two copies) must be delivered in a written form to the address below (in person or by e-mail) on or before 3rd July 2026 at 11:00am Consultants not located in the Country may submit their REOIs through the provided email address.

The packages must be clearly marked as; “Expression of Interest for Consultancy services for the development of codes of practice under the data protection and privacy act, cap.97.”

The Procurement Officer,

National Information Technology Authority-Uganda Palm Courts, Plot 7A Rotary Avenue,1st Floor Kampala-Uganda,

Email: [email protected]

Any form of canvassing or lobbying for the tender shall lead to automatic disqualification.

EXECUTIVE DIRECTOR.