Terms of Reference – Impact Analysis of Data Protection and Privacy Law and Compliance Review
National Organisations Australia Belgium Canada Colombia Denmark Finland France Germany Hong Kong India Ireland Japan Korea Netherlands Norway Spain Sweden Switzerland United Kingdom United States Programme Countries Bangladesh Benin Bolivia Brazil Burkina Faso Cambodia Cameroon China Colombia Dominican Republic Ecuador Egypt El Salvador Ethiopia Ghana Guatemala Guinea Guinea-Bissau Haiti Honduras India Indonesia Kenya Laos Liberia Malawi Mali Mozambique Myanmar Nepal Nicaragua Niger Nigeria Pakistan Paraguay Peru Philippines Rwanda Senegal Sierra Leone Sri Lanka South Sudan Sudan Tanzania Thailand Timor-Leste Togo Uganda Vietnam Zambia Zimbabwe

Registered in the Republic of Rwanda as an International Non-Governmental Organisation. Registration No. 130/RGB/18
About Plan International
We strive to advance children's rights and equality for girls worldwide. As an independent development and humanitarian organisation, we work alongside children, young people, our supporters and partners to tackle the root causes of the challenges facing girls and all vulnerable children. We support children's rights from birth until adulthood and enable them to prepare for and respond to crises and adversity. We drive changes in practice and policy at local, national and global levels using our reach, experience and knowledge. For over 80 years, we have been building powerful partnerships for children and are active in over 75 countries.

Similar Jobs in Rwanda
Learn more about Plan International Rwanda
Plan International Rwanda jobs in Rwanda

About Plan International Rwanda
Plan International Rwanda opened in January 2007 and is currently working in the Eastern and Southern Provinces of Rwanda in the districts of Gatsibo, Bugesera and Nyaruguru and the five (5) camps hosting refugees, namely Mahama, Kiziba, Mugombwa, Kigeme and Nyabiheke.

Plan International's Position on Data Privacy and Protection
Data Privacy and Protection is about the respect of personal data based on an individual's rights to privacy. The right to privacy is a human right and is a core value of Plan International as a rights-based organisation. For Plan International to respect the right to privacy of staff, children, and communities we work with, we must be careful about how we collect, use, store and share personal data. There are laws worldwide setting out how personal data should be handled. Plan International complies with the personal data laws of all countries it works in and data privacy best practices.

Purpose of Consultancy
Plan International's Legal Management Standards require all offices to comply with all applicable laws and regulations. Fundamental to this is that the office knows which laws and regulations are relevant to its operations and has mechanisms in place to monitor and respond to changes in the law.
On the 15th of October 2021, Law No 058/2021 of 13/10/2021 relating to the protection of personal data and privacy was officially gazetted by the Republic of Rwanda. The law protects personal data and ensures the privacy of individual users.
Plan International Rwanda seeks to hire a consultant to analyse the new data protection and privacy law, assess current practices, and recommend actions to ensure full compliance. The consultant will be responsible for providing a comprehensive review of the organisation's existing data protection and privacy practices, identifying areas of non-compliance, and recommending strategies to ensure that the organisation fully complies with the new law.

Key Objectives of the Consultancy
The consultant will work in collaboration with Plan International Rwanda to achieve the following deliverables:
1. Analyse the new data protection and privacy law and identify how it applies to our
2. Conduct a comprehensive review of our organisation's data protection and privacy policies, procedures, and practices to identify areas of non-compliance.
3. Review our organisation's data protection and privacy practices against the new law's
4. Provide recommendations for actions to address identified areas of non-compliance.
5. Provide guidance and support for the implementation of recommended
6. Develop a training program for our staff on data protection, privacy laws, and

The consultant will deliver the following documents in English;
Deliverable Format Length Due Detail
Inception
Call/Workshop In-person or
Virtual 1 day 3-04-23 Ensure that the selected consultant has
adequate information to start the work.
Inception Report Microsoft Word Document Maximum 12 pages 17-04-23 The inception report must include;
• Consultancy timeline.
• Detailed methodology, including data collection tools; ethical considerations; consent forms for any primary data collection;
Draft Impact and Review Report Microsoft Word Document Maximum 40 pages 12-05-23 The report should be submitted within ten (10) working days from the conclusion of the data collection process.
A validation workshop In-person workshop 1 day 19-05-23 A validation workshop will be conducted, and the draft report and training plan will
be presented and discussed with the Country Leadership Team.
Training
Sessions and Report In-person training TBC 2-06-23 Training will be carried out following the
training plan, and a report will be produced.
Final Review Report Microsoft Word Document Maximum 40 pages 9-06-23 A final impact analysis, compliance, and competence review report will be Plan International Rwanda staff for acceptance.
Consultancy Timeline
Activity Working Days Due Responsible
Invitations to Tender 7 28-03-23 Plan International
Rwanda (PIR)
Background Checks and Contracting 3 31-03-23 PIR
Inception Call/ Inception Workshop 1 3-04-23 PIR and Consultant
Preparation and Submission of Inception Report 10 17-04-23 Consultant
Data Collection 10 28-04-23 Consultant
Preparation of Draft Impact and Review Report 10 12-05-23 Consultant
Validation of Draft Impact and Review Report 1 19-05-23 Consultant
Training Sessions with all staff TBC 2-06-23 Consultant
Submission of Final Report 5 9-06-23 Consultant

Reporting
The consultant will report to the Head of Operations and work closely with the legal, IT, programmes and sponsorship teams and other relevant stakeholders.
Payment Scheduling
PIR will pay the consultant 50% of the overall fee on production of the validated draft report and training plan and the remainder upon submission and validation of the final report.

Expected Consultant(s) Competencies/Lead Consultant Profile
• A degree in law, information technology, or a related
• Relevant experience as a consultant in data protection and privacy
• A thorough understanding of the new Rwanda data protection and privacy
• Strong analytical and problem-solving skills, with the ability to assess complex situations and design effective
• Excellent communication and interpersonal skills, with the ability to influence and engage stakeholders at all levels of the
• Demonstrated ability to work collaboratively as part of a
• Proficiency in qualitative and quantitative methods of data
• Excellent report writing and data interpretation skills.
• Ability to conduct research
• Knowledge of English and/or French and Kinyarwanda
• History of published articles, studies, or research work.
Companies with relevant experience with evidenced proof of expertise of staff on this assignment are also eligible to apply.

Submission of Consultancy Proposal
Interested applicants should provide a proposal covering the following aspects:
1. Administrative documents:
1. Copy of Registration
2. VAT
• RRA and RSSB

1. Technical Proposal:
The technical proposal must correspond to the structure of the TOR. It must be legible (font size 11 or larger) and be clearly formulated. The offer is drawn up in English and must include the following;
1. A Cover letter expressing interest in this assignment;
2. A one-page Consultant's understanding of the TOR;
• The proposed methodology, activities and expected outcomes;
1. A detailed activities schedule/work plan with a time frame (including a Gantt chart);
2. A profile of the individual consultant or consulting firm, including the full names, physical addresses, telephone numbers and contact person of the form/company;

3. Copy of CVs of all the consultants who will undertake the assignment;
• Two previous examples of similar work executed for well-recognised organisations/INGOs.
1. Financial Proposal Detailing:
1. Itemised consultant's fees;
2. Itemised administration expenses;
• The validity period of quotation;
1. Indicates all-inclusive total contract price in RWF and tax inclusive

Applications
Applications must be submitted in hard copies (1 original and 1 copy) and delivered to Plan International Rwanda, Country Office by Wednesday, 27th March 2023 at 2:00pm
Kindly submit your offers clearly marked Consultancy for “Impact Analysis of Data Protection and Privacy Law and Compliance Review’' separating Technical and Financial Proposals in sealed envelope.
Done on 9th March 2023
Submissions should be addressed to
The Chairperson -Tender Panel
Plan International Inc. Rwanda
Golden Plaza Building, Floor # 4, KG 456 St
P.O. Box 6211, Kigali, Rwanda.
For further details, please contact the reception of Plan International Rwanda at +250 788305392