Consultant STTA – Data Management Plan 177 views

SCOPE OF WORK

Position Type:                         Consultant STTA – Data Management Plan  

Period of Performance:           To Be Confirmed

Background

KIM is a USAID funded project that is designed to unlock $520 million in investment for key sectors of Kenya’s economy, including agriculture; horticulture, dairy, and livestock (supported by Feed the Future), energy (supported by Power Africa), regional trade and investment opportunities (supported by the Prosper Africa initiative), women-owned businesses as well as in the WASH, health, and infrastructure sectors. KIM addresses constraints on both the supply and demand sides of investment transactions and is building a market system that will mobilize substantial capital from the public and private sectors. By building local partnerships among stakeholders in the financial system, KIM is stimulating the power of the private sector to accelerate Kenya’s journey to self-reliance.

KIM addresses two principal market failures that have discouraged investors from financing important segments of the targeted sectors: (i) insufficient quality consulting services (financial, transaction advisory, strategy, and business performance); and (ii) limited scalability of financial products tailored to selected key sectors of the economy in the region. KIM provides capacity building support to both business advisory service providers (BASPs) and Financial Institutions (FIs). KIM uses smart incentives to mobilize finance for development in the targeted sectors. These incentives are designed to create a sustainable ecosystem for businesses to access finance and investments needed to expand and grow. Business transactions are further supported by a diverse range of sustainable partnerships–with and among strategic businesses, institutions, government counterparts (county and national) and other development partners. These partnerships will lead to scaling and replicating creative approaches to unlock finance and investments, reduce risks of extending credit to the agriculture and energy sectors, and offer testing of innovative business models that can be scaled. The geographical scope of KIM is the East African Community (EAC, Kenya, Uganda, Tanzania, Burundi, and Rwanda), as well as Ethiopia.

KIM’s BASP network and FIs collect Personally Identifiable Information (PII) as part of their core business needs and support to businesses. As part of KIM’s monitoring, evaluation and learning, as well as to verify incentive payments under its Pay for Results (P4R) model, KIM receives PII related to businesses being supported by the BASPs and FIs. This is currently governed under its Activity Monitoring, Evaluation and Learning Plan; however, KIM does not have a separate data management plan.

With the publication of draft regulations related to the Kenya Data Protection Act, KIM needs to ensure its practices comply with the Act. The scope of the Act is broad and aligns with USAID’s Using Data Responsibly guidelines. Compliance with the Act presents a number of challenges to KIM, particularly due to the number of stakeholders that could be defined as data processors and/or data controllers under the Act and the additional regulatory burden to transfer to a third-country, a requirement under the KIM contract. To address these concerns, KIM requires a data management plan that will facilitate full compliance with the data protection requirements and international best practices in data management.

Objective

The consultant will develop a data management plan which meets the standards defined in USAID’s Using Data Responsibly and the requirements of the Kenya Data Protection Act and draft regulations. This data management plan will be created in collaboration with the KIM Monitoring and Evaluation Manager, senior leadership team and project delivery manager. The plan will further determine if there is a need to conduct a data protection impact assessment.

Specific Tasks

The consultant is expected to undertake the following tasks in line with the overall objective of this assignment:

 1.  Review the existing laws, regulations and data management guidelines and their applicability to KIM data management processes.

 2.  Undertake a system review to understand the current data management processes and identify areas that need to be streamlined to ensure full compliance with the data protection requirements.

3.    In collaboration with the KIM Monitoring and Evaluation Manager, assess KIM’s current data management practices, particularly as it pertains to BASP and FI business and PII data.

4.    Map the flow of PII from KIM subcontractors to KIM and from there to USAID.

5.    Identify opportunities to anonymize, de-identify or otherwise protect data in flow

6.    Recommend good practice improvements in KIM’s data management practices, particularly regarding safeguarding PII.

 7.    Prepare a draft report based on the review above and provide recommendations on actions needed by KIM to ensure full compliance.

8.    Develop a data management plan which meets the requirements of USAID’s using data responsibly, the Kenya Data Protection Act and associated draft regulations.

9.    Following the completion of the data management plan, the consultant may be tasked provide advice on whether a data protection impact assessment is required and/or conduct a data protection impact assessment.

Travel

Travel will not be required for this assignment.

Time Frame and LOE

The period of performance will be from 1 November 2021 – 31 December 2021.  The estimated LOE for this scope of work is 8 days.

Deliverables

Deliverables will include:

Technical Oversight and Supervision

The Consultant will report to the Monitoring and Evaluation Manager. 

Key Competencies Required and Preferred Experience

Professional expertise preferred:

·         Demonstrated experience in developing data management plans compliant with USAID’s Using Data Responsibly

·         Minimum of 5 years (10 years preferred) work experience in monitoring and evaluation, data management, data protection or a related field

·         Experience applying data protection standards similar to the Kenya Data Protection Act, such as the General Data Protection Regulation (GDPR), to data collection and processing activities.

·         Experience in conducting data protection impact assessments preferred.

·         Experience in application of data protection standards in the Kenyan context preferred.

Key competencies:

A.     Substantial project management experience monitoring and evaluation or data management

B.      Excellent written and oral communication skills

C.      Sound problem-solving and decision-making skills.

D.     Fluency in English.

Proposal Submission

Interested qualified consultants must submit their proposals by Monday, October 11^th, 2021, at 23:59 hours, EAT (UTC +3).