Data Protection Officer

Role Overview

The Data Protection Officer is responsible for establishing, implementing, and enforcing a robust Data Protection Compliance framework and systems. The primary objective is to ensure the Hospital complies with Data Protection Law and regulations. The job holder will serve as a member of the Data Protection Technical Committee (DPTC) and will be responsible for implementing Information Risk and Data Protection programs across the organization.

Key Responsibilities

• Establish and enforce a comprehensive Data Protection Compliance framework and organizational systems.
• Manage and monitor compliance with the Kenya Data Protection Act and other relevant regulations.
• Serve as a key member of the Data Protection Technical Committee (DPTC).
• Lead the implementation of Information Risk and Data Protection programs within the Hospital.
• Provide legal advisory services related to data privacy and regulatory standards.

Academic and Professional Qualifications

• Bachelor's Degree in Law (LLB) from a reputable institution recognized in Kenya.
• Postgraduate Diploma in Legal Studies from the Kenya School of Law.
• Advocate of the High Court of Kenya with a current practicing certificate.
• Member in good standing with the Law Society of Kenya (LSK).
• Formal training or certification in data protection or privacy law.
• Sound knowledge of the Kenya Data Protection Act and applicable frameworks.
• General familiarity with the General Data Protection Regulation (GDPR).

Experience Requirements

• Minimum of three (3) continuous years of relevant experience specifically in privacy and data protection.
• Prior experience within the healthcare sector or a regulated industry is highly advantageous.

How to Apply

Interested candidates should send their applications to recruitment@nairobiwesthospital.com. Ensure your application reaches us by the deadline on May 20, 2026.