Legal Officer – Data Protection
Full Time1 week ago
Employment Information
PalmPay is seeking a detail-oriented Legal Officer with experience in Data Protection to oversee and ensure compliance with applicable data privacy laws and regulations.
This role will play a critical part in managing the company’s data protection strategy and ensuring that all processes and systems align with relevant legal frameworks including the NDPR, GDPR, and other regional data protection laws.
Key Responsibilities:
Ensure that PalmPay complies with all data protection and privacy laws across all jurisdictions where it operates (e.g., NDPR, GDPR, and applicable East/West African laws).
Draft, implement, and update internal policies related to data protection and privacy. Review third-party agreements to ensure compliance with data protection laws.
Conduct regular audits to assess data processing activities and identify potential risks. Advise internal stakeholders on risk mitigation strategies.
Develop and deliver training programs to educate employees on data protection responsibilities and best practices.
Coordinate and manage responses to Data Subject Access Requests (DSARs) and other rights under data protection regulations.
Support the incident response process in the event of data breaches, including investigation, documentation, and reporting to regulators as necessary.
Work closely with the IT, Compliance, Operations, and HR teams to ensure data privacy is embedded in all business processes.
Review data processing agreements, vendor contracts, and service provider documentation for compliance with privacy standards.
Liaise with data protection authorities when needed, manage regulatory filings, and ensure that all required documentation is maintained.
Requirements:
Bachelor’s degree in Law (LL.B).
3–5 years of post-qualification experience in legal and regulatory compliance, with a strong focus on data protection.
In-depth knowledge of NDPR, GDPR, and other relevant data privacy laws.
Certification in data privacy (e.g., CIPP/E, CIPM, NDPR) is a strong advantage.
Excellent legal drafting, analytical, and communication skills.
Ability to work independently and manage multiple tasks across different teams and jurisdictions.
Strong attention to detail and a proactive, solution-oriented approach.
This role will play a critical part in managing the company’s data protection strategy and ensuring that all processes and systems align with relevant legal frameworks including the NDPR, GDPR, and other regional data protection laws.
Key Responsibilities:
Ensure that PalmPay complies with all data protection and privacy laws across all jurisdictions where it operates (e.g., NDPR, GDPR, and applicable East/West African laws).
Draft, implement, and update internal policies related to data protection and privacy. Review third-party agreements to ensure compliance with data protection laws.
Conduct regular audits to assess data processing activities and identify potential risks. Advise internal stakeholders on risk mitigation strategies.
Develop and deliver training programs to educate employees on data protection responsibilities and best practices.
Coordinate and manage responses to Data Subject Access Requests (DSARs) and other rights under data protection regulations.
Support the incident response process in the event of data breaches, including investigation, documentation, and reporting to regulators as necessary.
Work closely with the IT, Compliance, Operations, and HR teams to ensure data privacy is embedded in all business processes.
Review data processing agreements, vendor contracts, and service provider documentation for compliance with privacy standards.
Liaise with data protection authorities when needed, manage regulatory filings, and ensure that all required documentation is maintained.
Requirements:
Bachelor’s degree in Law (LL.B).
3–5 years of post-qualification experience in legal and regulatory compliance, with a strong focus on data protection.
In-depth knowledge of NDPR, GDPR, and other relevant data privacy laws.
Certification in data privacy (e.g., CIPP/E, CIPM, NDPR) is a strong advantage.
Excellent legal drafting, analytical, and communication skills.
Ability to work independently and manage multiple tasks across different teams and jurisdictions.
Strong attention to detail and a proactive, solution-oriented approach.
Share this
