Data Protection Officer

The Data Protection Officer (DPO) will be responsible for leading the design, implementation, monitoring, and testing of the OpCo’s data protection and privacy compliance programme in line with applicable laws, regulatory requirements, and Airtel Group privacy standards. This role involves developing, reviewing, and strengthening privacy frameworks, policies, procedures, controls, and practices to protect personal data, manage privacy risks, and embed accountability across the business. Data Privacy Governance Ensure the organization’s compliance with applicable data protection laws in Zambia and relevant internal privacy standards. Develop and implement internal privacy policies and procedures that align with legal requirements and industry standards , including privacy standards, guidelines, controls, and governance processes. Maintain and monitor the OpCo’s privacy compliance obligations register, including regulatory registrations and ongoing obligations as a data controller and/or data processor. Monitor regulatory developments and advise the business on applicable privacy obligations and risks. Support implementation of the OpCo privacy strategy and roadmap aligned with Airtel Group privacy objectives. Data Privacy Management Ensure Privacy by Design and Privacy by Default principles are embedded across products, systems, and business processes. Collaborate with business stakeholders to ensure lawful and compliant processing of personal data across its lifecycle. Act as the primary point of contact for privacy incidents and personal data breaches, coordinating investigation, remediation, and regulatory reporting where required. Review data flows, data sharing arrangements, retention requirements, and cross-border data transfers to ensure compliance with applicable laws and standards. Conduct periodic privacy compliance monitoring, control testing, and readiness assessments to evaluate effectiveness of privacy controls and regulatory compliance. Oversee privacy