Recruitment of Data Protection Advisor — Shock Responsive Safety Net for Human Capital Project (SNHCP) (Federal Government of Somalia)

REQUEST FOR EXPRESSIONS OF INTEREST (REOI) COUNTRY: Federal Government of Somalia (FGS) NAME OF PROJECT: Shock Responsive Safety Net for Human Capital Project (SNHCP) PROJECT ID: P171346 Assignment Title: Data Protection Advisor Reference No.: SO-MOLSA-471273-CS-INDV Place of assignment: Mogadishu, Somalia 1. Background The Federal Government of Somalia, through the Ministry of Labor and Social Affairs (MoLSA) is seeking Data Protection Advisor. The Consultant will provide support to the Federal Government of Somalia and Baxnaano in data protection activities.

To implement these guidelines, a USR Oversight Board is being established at MoLSA. The Ministry of Labour and Social Affairs (MoLSA) will have data controller responsibilities for all social protection activities under its management, including the operations of the USR and Social Protection Programs. Data controllers exercise overall control of the purpose and means of personal data processing.

Controllers shoulder the highest level of compliance obligations and are responsible for appropriate compliance with the data protection principles, and relevant laws, regulations, and policies. Controllers are also responsible for the compliance of their data processors. MoLSA will take on and fulfill the obligations of data controller of major importance as stipulated in Somalia Data Protection Law.

MoLSA will act as data controller of major importance on behalf of the social protection sector and entities under its management. 2. Responsibilities of the assignment The overall responsibilities of Data Protection Advisor are (i) Inform and advise the USR Oversight Board, USR Unit and MoLSA leadership, on their obligations under Somalia Data Protection Law, applicable data protection operational guidelines and other relevant regulations, (ii) Advise and provide technical assistance to MoLSA in updating data protection laws and guidelines in the light of threats and opportunities arising from the new technologies like Artificial Intelligence, management of biometrics and cross-border data flows, with clear definitions for new data types and enhanced transparency requirements, (iii) Advise on data protection risk and compliance issues regarding new data intensive initiatives and material enhancements to existing ones; conduct Data Protection Impact Assessments (DPIA) (in consultation with subject matter experts and ‘owners’ of these initiatives) when deemed necessary, (v) Carry out other activities detailed in the Terms of Reference (TOR) for the assignment that can be found at the following website: www.molsa.gov.so.

• Selection Criteria: Selection shall be based on qualification and experience of the candidate and followed by an interview. The minimum qualification, experience and skills should include: • Master’s degree in Law, Cybersecurity, Computer Science or a related field.

Certified Information Privacy Professional (CIPP), CIPM or equivalent is an advantage. • At least 8 years of professional experience in the field of IT, Data Protection Laws, Privacy Advisory Role, Risk Management or compliance, and at least Five (5) years’ experience working on Data Protection issues, familiar with Somalia data protection law and regulations; • Ability to identify potential data security risks and understanding how to mitigate them; • Should understand the technologies that protect data, including encryption, anonymization, and pseudonymization. • Understanding of data governance, management, collection, storage, processing, and deletion; 4.

Duration: The duration for the assignment is 12 months, renewable based on satisfactory performance and availability of budget. 5. The Ministry of Labour and Social Affairs now invites eligible Individual to indicate their interest in providing these services.

Interested Individual Consultants must submit their Curriculum Vitae (CV) and cover letter indicating that they are qualified to perform the services. 6. The attention of interested Consultants is drawn to paragraphs 3.14, 3.16 and 3.17 of the World Bank’s Procurement Regulations for IPF Borrowers: Procurement in Investment Financing Goods, Works, Non-Consulting and Consulting Services dated July 2016 and revised in November 2017, August 2018, November 2020 and September 2023, (“Procurement Regulations”), setting forth the World Bank’s policy on conflict of interest.

• A Consultant will be selected in accordance with the Individual Consultants Selection method set out in the World Bank’s Procurement Regulations. 8. Mode of submission of Applications and deadline: Interested Consultants may obtain further information including a detailed Terms of Reference at the address given below from 8:30 to 3.30pm Mogadishu time (Excluding public holidays).

Expressions of interest (EOI) and CV must be delivered (in person or by e-mail) in a written form in three (3) hard copies (if not by e-mail) to the address below by March 5, 2025 3.30 PM (Mogadishu Time) – marked clearly as – Data Protection Advisor. Att. Procurement Specialist Social Protection Department, Ministry of Labour and Social Affairs Federal Government of Somalia Email: procurement@molsa.gov.so