Request for Proposal - Data Protection Consultancy Services

Request for Proposal

Data Protection Consultancy Services

RFP/BEY/22/018

FOR

DANISH REFUGEE COUNCIL (LEBANON)

The Danish Refugee Council Founded in 1956, the Danish Refugee Council (DRC) is a leading international NGO and one of the few with a specific expertise in forced displacement. Active in 40 countries with 9,000 employees and supported by 7,500 volunteers, DRC protects, advocates, and builds sustainable futures for refugees and other displacement affected people and communities. DRC works during displacement at all stages: In the acute crisis, in displacement, when settling and integrating in a new place, or upon return. DRC provides protection and life-saving humanitarian assistance; supports displaced persons in becoming self-reliant and included into hosting societies; and works with civil society and responsible authorities to promote protection of rights and peaceful coexistence.

Operating since 2004 in Lebanon, DRC has addressed the needs and rights of vulnerable populations, working initially with Palestinian refugees (since 2004), Iraqi refugees (2007-2010), Lebanese IDPs (during the 2006 conflict), migrant domestic workers (since 2009), responding to the Syrian refugee crisis (since 2011) and to Lebanese crisis (since 2019).

DRC Lebanon is currently delivering programming in protection, livelihoods, and community development interventions. This myriad programming seeks to address the immediate needs of displaced populations and concurrently support vulnerable host populations. DRC has three offices spread throughout Lebanon in, Beirut, the Beqaa and North. 

For further information about DRC, please refer to our website: https://drc.ngo/

Objectives:

The Danish Refugee Council based in Lebanon seeks proposals from a registered Consultant

Company  or Individual ,to to review existing data protection policy, current tools and practices, including data sharing agreements, lead on the production of a Data Asset Registry, and associated products, for DRC Lebanon, which will inform the upcoming GDPR compliance process. Noting that DRC Lebanon already has a data protection policy created in 2017, Memorandum of Understanding signed between DRC Lebanon and RIMS users, a Data Sharing Agreement integrated with the MoU, 10 information security policies, and Data Protection Impact Assessment developed early 2022, through the below:

• Review and enhances existing data protection policy in alignment with GDPR with consideration of few articles in the Lebanese law in relation to data protection.
• Conduct data ecosystem map and data asset registry for DRC Lebanon programme sectors Protection, Economic Recovery, and for the information management system RIMS
• Conduct one Data Sensitivity Matrix for DRC Lebanon operations
• Review existing Information Sharing Protocol and draft Data & Information Sensitivity Classification between DRC and external stakeholders such implementing partners, and DRC led consortium members.
• Review existing Data Sharing Agreements templates and forms with external stakeholders and advise on potential enhancements.
• Review existing Individual Data Protection Impact Assessments for Protection, Economic Recovery sectors, and for RIMS and advise on improvements and enhancements
• Liaise with DRC’s Information and Cyber Security focal points on including Information Security Policies including Data incident management into the national data protection policy
• Draft user-friendly data protection communication materials to raise awareness among DRC staff around Data Protection
• Other duties as agreed with the Head of Programmes and/or Information Management Coordinator in line with objectives above and weekly work plans.

The Consultant will be required to prepare a detailed methodology and work plan indicating how

the objectives of the project will be achieved, and the support required from DRC.

RFP Issuing date: 30 November, 2022

RFP Closure Date:  8 December, 2022 at 2:00 pm (Beirut time)