Requirements for Appointment
For appointment to this grade, a candidate must have:

• Kenya Certificate of Secondary Education (KCSE) mean grade C+ (Plus) or its approved equivalent from a recognized institution;
• Bachelor’s degree in any of the following fields: Law, information communication technology, computer science, informatics or an equivalent qualification from a recognized and accredited institution; and
• Proficiency in computer applications.

Duties and Responsibilities
Specific duties and responsibilities will involve:

• Conduct inspections and periodical audits of the processes and systems of the data controllers and data processors;
• Prepare draft guidelines and carrying out data protection impact assessments;
• Prepare inspection and compliance reports;
• Review evidence submitted by data controllers and data processors relating to information; privacy and security safeguards for cross-border data transfers;
• Receive and process notifications of data breaches from Data Controllers and Data Processors;
• Receive complaints on infringement of the rights under the Data Protection Act;
• Conduct investigations on complaints made by data subjects or third party;
• Identify systemic issues and recommend remedial measures and proactive action;
• Receiving and reviewing applications for registration;
• Drafting registration and certification strategies, policies, processes and procedures;
• Updating of the register of Data Controllers and Data Processors;
• Drafting enforcement notices;
• Serving enforcement notices;
• Drafting requests for obtaining warrant from the court to enter and search premises;
• Drafting penalty notices;
• Establish and Maintain up to date complaints database;
• Prepare complaints investigation reports; and
• Perform any other duties assigned by the Supervisor.

Skills and Competence

• Analytical skills
• Interpersonal
• Communication skills;
• Creativity and Innovativeness
• Problem solving skills;
• Risk management skills;
• Continuous learning skills