Privacy Impact Assessment Consultant At World Food Programme

BACKGROUND

The United Nations World Food Programme is the world’s largest humanitarian agency fighting hunger worldwide. The mission of WFP is to help the world achieve Zero Hunger in our lifetimes. Every day, WFP works worldwide to ensure that no child goes to bed hungry and that the poorest and most vulnerable, particularly women and children, can access the nutritious food they need.

In emergencies, WFP gets food to where it is needed, saving the lives of people affected by disasters, conflict, epidemics/pandemics and more. After an emergency, WFP uses food to help communities rebuild their shattered lives. On average, WFP reaches more than 100 million people with food assistance in 83 countries each year. The organization has the global footprint, deep field presence and local knowledge and relationships necessary to provide access to nutritious food and contribute to the lasting solutions, especially in many of the world’s most remote and fragile areas.

Through the Country Strategic Plan 2019-23 (CSP), WFP Cambodia is contributing to achieving Zero Hunger through a combination of direct implementation and systems capacity strengthening at national sub-national level. Through the CSP, WFP promotes access to nutritious diets through home grown school feeding and improving climate smart food production and transformation capacities of small holder farming communities, whilst strengthening standards and guidelines for food transformation to satisfy the increasing demand for nutritious processed and convenient foods. WFP supports national and subnational disaster and climate change risk management and to the national strategic direction and coordination on food security, nutrition and social protection through enhanced information systems, knowledge management, and public-private and south-south partnerships. WFP also responds to the acute food security and early recovery needs of vulnerable women, men, girls and boys impacted by recurrent disasters.

WFP processes large amounts of beneficiary data within its own programmes and operations, including emergency assistance, and in some instances uses a digital platform SCOPE as the technological solution for beneficiary information and transfer management platform. Managing people’s personal data and identity is extremely sensitive. Unintended use of personal data, especially if used outside its legitimate purpose, may cause harm to the people WFP seeks to assist. Protecting personal data is therefore about protecting people’s life, dignity and integrity, which is the core commitment set forth by the 2020 WFP Protection and Accountability Policy. Moreover, with the WFP Guide to Personal Data Protection and Privacy (2016) and draft Beneficiary Identity Management Guidance (2020), WFP has taken concrete steps to put forward beneficiary data protection in the way it operates and has developed Data Protection Toolkit (2019) to support this objective.

A key tool used in data protection work in WFP is a Privacy Impact Assessment (PIA) which is aimed at identifying, evaluating and addressing the risks (e.g. protection, legal, principled humanitarian action, etc.) arising from the processing of personal data related to a specific activity, project, programme, initiative or, in this case, a whole Country Strategic Plan (CSP). The PIA is a multifunctional exercise, which draws from the expertise of units such as IT, SCOPE, partnerships, programme and protection.

PURPOSE OF THE ASSIGNMENT:

The PIA Consultant will support improved implementation of privacy and personal data protection in WFP Cambodia by completing the PIA for the CSP and implementing some of the key recommendations, primarily through support of WFP’s Cooperating Partners (CPs).

The PIA Consultant will be based in Phnom Penh but may by mutual agreement work for some of the period remotely or in various states depending on COVID-19 restrictions and the field activities needed for PIA completion. S/he will be under the guidance of the CBT Programme Policy Officer and the technical supervision of the Regional Beneficiary Data Protection Advisor.

ACCOUNTABILITIES/RESPONSIBILITIES:

Conduct and complete the Privacy Impact Assessment for WFP Cambodia CBT operations in collaboration with other relevant units in WFP[1]. Completing the PIA includes, but is not limited to:

· Develop a deliverable-based workplan for the assignment, with the completed PIA report as the final product

· Conducting secondary literature and data review to understand the:

o Socio-political situation and relevance of identity and personal data therein;

o Protection issues experienced by crisis and poverty affected people, with special focus on issues where identity, or lack of identity, or any particular status of the person (e.g., ethnicity, language, disability, gender, displacement, etc.) is a triggering factor;

o Legal framework on data privacy and protection in Cambodia, including applicability of UN privileges and immunities, domestic legislation and regulations of relevance to people’s identity (e.g., Know Your Client regulations; anti-terrorism laws; anti-money laundering laws; any other public health or public security law requiring access to personal data) and possibility that partners or third parties are obliged to disclose data to authorities;

o Known or foreseeable actors that might be interested in requesting/accessing/seizing personal data collected by WFP to pursue humanitarian and non-humanitarian purposes;

o Risks of possible unintended use of personal data and consequences on WFP’s beneficiaries.

· Conducting internal consultations with relevant WFP staff, including heads of units, heads of field offices, activity managers, and colleagues working on data protection at the country, regional and headquarters level;

· Conducting external consultations with relevant humanitarian agencies and sectors (e.g., UNHCR, OHCHR, UNICEF, UNFPA, IOM), WFP CPs and Protection Sector and affected people of various gender, age, disability and other diversity;

· Engaging in field visits as necessary to complete data collection and consultations for the PIA, including to observe informed consent being obtained from beneficiaries for data collection and registration, with a view to developing informed consent guidance document for partners;

· Analysis of data flows, data security, data quality and data subject rights in WFP operations at WFP country and field-office level;

· Analysing WFP Cambodia current status with respect to implementation of privacy and personal data protection, including issues such as data quality, data subject rights, data security standards, and risk analysis as per the Data Protection Toolkit;

· Risk analysis overview and recommendations.

· Completing drafting the report including all annexes, consulting relevant colleagues for inputs on the final draft and presenting it to Heads for endorsement of the recommendations.

QUALIFICATIONS & EXPERIENCE REQUIRED:

Desired experiences for entry into the role

· Knowledge of legal frameworks on human rights, data protection and privacy and international humanitarian law.

· 2-5 years of relevant work experience in the field of protection or research;

· Solid analytical and writing skills;

· Ability to conduct work remotely with little oversight at times;

· Team spirit and excellent interpersonal relations.

· Experience in digital privacy is desirable

· Flexibility to travel to and live in difficult environments;

Education & Experience:

Advanced university degree in one of the following disciplines: social sciences, law, humanitarian assistance, or another field related to international relations, human rights, or political science.

Languages:

Fluency (level C) in written and spoken English.

Working knowledge of other languages spoken in Cambodia is desirable.

[1] Including Programme (with SOs, VAM, CFM, CBT, Monitoring, Communications, Security, PO teams, IT, Budget and Programming, Administration and Finance; and Supply Chain units).