Data Protection and Governance Lead (Home Based) - [Open to All applicants]

Background

UNDP is the development arm of the United Nations.  Present in 170 countries with over 17,000 people, UNDP works on the world’s biggest challenges, from rising poverty and inequality to a rapidly changing climate, the emergence of crises and the continued degradation and destruction of our natural world.  Our UNDP Digital Strategy 2022 – 2025 aims to support our partner countries to unlock the power of digital to tackle these pressing issues.  The strategy lays out UNDP’s ambition to use a rights-based approach to digital technologies to improve our development results and help build inclusive digital ecosystems globally that leave no one behind.

In line with UNDP’s strategic commitment to remain at the forefront of development innovation and transformation, a new organizational structure – the Digital, AI and Innovation Hub – has been established within BPPS, effective 2 April 2025. This Hub consolidates the Chief Digital Office (CDO), Accelerator Labs, Strategic Innovation Unit (SIU), and selected elements of the SDG Integration team into a unified platform.

The Hub builds on years of foundational investment in digital transformation, grassroots innovation and data-driven development. It is designed to enhance coherence across programmes, strengthen organizational learning, and improve operational efficiency. Most importantly, it will serve as the central point of contact for governments and development partners seeking support on digital and systems transformation, working in close collaboration with regional bureau, country offices, and global policy teams.

Duties and Responsibilities

The Data Protection & Governance Lead is responsible for safeguarding personal data, ensuring compliance with international data governance standards, implementing robust data governance frameworks, and shaping the organization's strategic approach to emerging technologies (such as AI).

This role enhances data usage across UNDP's operations and programmes. The incumbent develops and enforces data protection policies, advises senior management on data-related matters, conducts privacy risk assessments, manages data breaches, and promotes a culture of responsible data within the organization.

Reporting into the Advisor, Data and Technology at the Digital, AI, and Innovation Hub, the incumbent will be responsible for below:

Responsibilities:

Lead Implementation Initiatives for Governance and Compliance

• Lead the implementation and review of UNDP’s Data Protection and Privacy policy, ensuring alignment with the United Nations Principles on Personal Data Protection and Privacy and international best-practice.
• Advise senior leadership on regulatory developments and emerging best practices in data governance, protection, and AI ethics.
• Work with the IT Management team to ensure that appropriate safeguards are in place for data transfers and oversee the development of standard operating procedures (SOPs) related to data retention, deletion, and breach management.
• Provide support in managing and responding to data subject access requests (DSARs) in compliance with internal policies.

Ensure Effective Data Protection and Risk Management (Operations)

• Conduct data protection impact assessments (DPIAs), providing strategic recommendations for risk mitigation.
• Identify and assess data protection and privacy risks across UNDP's global operations, working with relevant departments to mitigate these risks. 
• Lead the development of a data breach management process, ensuring timely notifications and responses to breaches.
• Develop a repository of data processing activities and support the data mapping efforts to improve oversight of data handling practices within UNDP.

Lead the development of Responsible AI and Data Innovation Strategy

• Provide policy and ethical guidance on the use of artificial intelligence and algorithmic tools within UNDP programs and digital systems.
• Collaborate with internal and external stakeholders to integrate responsible AI principles, such as fairness, transparency, and accountability, into data strategy and project design.
• Support scenario planning and horizon scanning related to emerging technologies and their implications for data governance.

 Advocacy, Thought Leadership and Knowledge Management

• Design and deliver training on data protection, responsible data use, and AI risk mitigation for staff and leadership.
• Promote a culture of data ethics, including principles like privacy-by-design, data minimization, and rights of data subjects.
• Raise awareness of d