RE: ADVERTISEMENT FOR DATA PROTECTION SERVICES
Balozi Sacco is a non-WDT Sacco regulated by SASRA with its office in Nairobi. The Sacco has a
membership of over 4000 and asset base of over Ksh. 5 billion. The Sacco is registered as a Data
Controller and a Data Processor by the Office of the Data Protection Commissioner (ODPC).

The Sacco seeks to engage a partner to act as the Sacco’s data protection officer and to provide
services endeared to the implementation of the Data Protection Act, 2019 and Regulations.

Objectives
The key objectives include and not limited to:
1. Correspondence with Office of the Data Protection Commissioner (ODPC), relevant Regulators,
and other key stakeholders on behalf of the Sacco.
2. Assist and guide staff & Management in responding to enquiries or requests from Regulators
(ODPC) on regards to data subjects and other stakeholders as appropriate.
3. Organize and participate in the training and awareness programs for staff on the relevant data
protection & privacy requirements and obligations.
4. Promote a culture of data protection & privacy by design and by default in the Sacco.
5. Review of data mapping for all personal data in the custody of Sacco.
6. Review of data protection impact assessment.
7. Review of consent management & breach notification.
8. Review of data protection policy for any updates.
9. Review of management of third-party documents, data processors and transfer of personal data
10. Review of data retention management
11. Provide quarterly monitoring and evaluation assessment reports on data protection services.

Data Protection firm
Balozi Sacco will only engage organizations registered with the ODPC and who have prior similar
experience. The key personnel should also be registered with an approved professional body to act as
the Data Protection Officer for organizations.

For more details: Data Protection Officer