DATA PROTECTION OFFICER – CIPA

VACANCY 

The Companies and Intellectual Property Authority (CIPA) is a parastatal established by an Act of Parliament, the Companies and Intellectual Property Authority Act of 2011, to promote and enable the full protection of the rights of investors obtained under the Companies Act, Registration of Business Names Act, Industrial Property Act, and the Copyright and Neighbouring Rights Act.

The Authority is positioning itself for the advancement of its mandate and is searching for some dynamic individuals to take up the following positions.

DATA PROTECTION OFFICER

The Data Protection Officer (DPO) is responsible for ensuring CIPA’s compliance with data protection laws and regulations, including Botswana’s Data Protection Act. The DPO will act as a central liaison in safeguarding personal data, mitigating data privacy risks, and fostering a culture of data protection across the organization.

Key Performance Areas

* Monitors organizational compliance with Botswana’s Data Protection Act and other relevant regulations;
* Conducts Data Protection Impact Assessments (DPIAs) to identify and mitigate risks in data processing activities;
* Ensures proper documentation of processing activities, including maintaining a data processing register;
* Develops, implements and manages the Authority’s data protection management framework;
* Audits the operations in line with the data protection framework to identify areas for improvement;
* Provides training on the Data protection Act for the Authority;
* Develops and enforces strong internal systems of controls to achieve compliance with data protection laws and international best practices;
* Advises senior management and employees on their obligations under data protection laws;
* Collaborates with IT, Legal, and operational teams to align data handling practices with regulatory requirements;
* Provides guidance on the development and implementation of data protection policies and procedures;
* Reviews all agreements and contracts relating to the Company’s operational activities for compliance with data protection requirements;
* Develops and delivers training programs to educate employees on data privacy and protection best practices;
* Raises awareness across the organization about the importance of data protection and its impact on operations;
* Leads investigations into data breaches and ensure timely reporting to relevant authorities as required by law;
* Develops and implements procedures for detecting, responding to, and mitigating data breaches;
* Acts as the primary point of contact for data protection authorities and regulatory bodies, and;
* Manages data subject access requests and other inquiries from customers regarding their personal data.

Qualifications

* Bachelor’s degree in Law, Information Technology, Enterprise Risk Management, Project Management, Business Administration or any other related field.
* Certification in Data Protection or Privacy (e.g., CIPP, CIPM, or CIPT) will be an added advantage.

Experience

* A Minimum of 5 years of experience in legal, compliance, risk management, data protection roles or any other related field.
* Demonstrated expertise in data protection laws and practices, including Botswana’s Data Protection Act or other relevant experience.
* Experience working with cross-functional teams and managing data privacy initiatives.

Competency Requirements

* Strong understanding of data protection laws, principles, and best practices.
* Excellent analytical and problem-solving skills.
* Strong communication and interpersonal skills.
* Ability to manage sensitive information with integrity and discretion.
* Proficient in drafting policies, reports, and other documentation