MST PERSONAL DATA PROTECTION

GENERAL CONTEXT

Médecins Sans Frontières is an international independent medical-humanitarian organization, which offers assistance to populations in distress, to victims of natural or man-made disasters and to victims of armed conflict, without discrimination and irrespective of race, religion, creed or political affiliation.

At its core, MSF is a civil society initiative, bringing together individuals committed to assisting other human beings in crisis. Each individual working with MSF does so out of conviction and is ready to uphold the values and principles of MSF. The global MSF movement is built around six operational directorates supported by more than 25 sections and offices worldwide.

MAIN PURPOSES

MSF OCBA collects and processes personal information from our patients, our staff, our donors and other partners and collaborators. All individuals have a right to privacy, and to know that their data is handled and stored safely, confidentially and without risk of this data being abused. MSF OCBA has the ethical and legal obligation to assure data protection and privacy, particularly for those most vulnerable to for instance persecution, stigmatization, or targeted violence.

The objective of the position of MST is to advance our ethical and privacy obligations in our project activities by supporting projects and missions in implementing data protection safeguards, with the priority being on most sensitive data and people. The role provides practical support and solutions on data protection issues, and develops standards, templates and procedures along the way, based on existing guidance, best practices and experience. Additionally, the role aims to increase awareness and understanding of privacy and data protection amongst our field staff.

The MST Data Protection is reporting to the Data Protection Officer in HQ, and to the Head of Mission while on field assignment.

RESPONSIBILITIES AND MAIN TASKS

When on assignment, in accordance with Terms of Reference agreed for each assignment, provide support to coordination teams and project teams on key personal data protection challenges.

• Create a mapping of all personal data collecting and personal data processing activities in a mission, a project, or a department, in line with the scope of the assignment Terms of Reference.
• Obtain information on and understanding of local legal requirement on data protection and privacy, if existing.
• Evaluate and determine the biggest data protection and privacy risks, considering our ethical obligations and commitments on duty of care and do no harm, concerns on security and protection, as well as legal requirements (local legislation and GDPR requirements such as legal basis, data handling and retention, data subject rights, information notice, etc).
• Together with the project and coordination teams, and with support from HQ, develop solutions to address the most pertinent data protection concerns in the most practical way, including solutions related to retention periods, minimization of data, anonymization, ways of storage, etc. This is done in collaboration with and support from the Data Protection Officer in HQ and external data protection consultants, and in close collaboration with other HQ departments such as ICT, ILD, IM, Information Security and Medical Department health data referents.
• Support our teams with the practical implementation of the developed data protection solutions.
• Keeping a good record and reporting of all the steps taken, and of all the risks and solutions identified, so that this facilitates handover and understanding between staff, and supports in maintaining the level of implementation of the data protection measures.
• Develop awareness and training material, and train staff and raise awareness about data protection and data security responsibilities, accountabilities, and good practices.
• For the prioritized, high-risk data processing activities, identify and train focal points in missions to handle data protection responsibilities.
• Support in data breach management in case a field data breach would occur, in collaboration with the Data Protection Officer, and assure data breach management protocols are followed.

When not on assignment, they contribute to the ongoing learning and development of the data protection area by:

• Turning solutions, experiences and best-practices into templates, tools, methodologies and policies that can be used in other contexts.
• Contribute to the definition of the training and awareness material on data protection and privacy.
• Follow up with previously visited missions on the status of implementation of identified data protection measures.
• Do high-level, remote risk assessments on data protection and privacy in specific contexts, and identify missions and projects that can require support.
• Liaise with other departments and disciplines for developing data protection measures for more complex and transversal data processing activities in the field.
• When required and relevant, collaborate with MSF international and intersectional data protection groups by sharing experiences, best practices, and tools to support project activities and enhance responsible data management.

SELECTION CRITERIA

• Education and/or experience in Data Protection or similar relevant (administrative) roles.
• Previous experience in MSF projects or another NGO is highly valued as an asset.
• Availability to travel frequently and flexibility in terms of work schedules.
• Fluency in English and French required. Spanish and Arabic are an asset.
• Good reporting skills.
• Good computer user skills (Microsoft Office 365).
• Understanding of change management and process implementation.

CONDITIONS

• Position home based. Frequently travels to the missions (at least 50 % of his/her working time with visits ranging from a few weeks to a few months).
• Full time job.
• Annual Gross salary: IRP2 Level 5 (divided in monthly payments) + secondary benefits based on MSF OCBA Reward policy. Subjected to local conditions.
• Practical working conditions while in the field are as per the MSF-E guideline.
• Contract duration: 12 months.
• Starting date: As soon as possible.

HOW TO APPLY

• To apply, please submit your CV and cover letter.

• Closing date: 24th of February, 2026 at 23:59 CET (Central European Time).

MSF is committed to achieving workforce diversity in terms of gender, race, nationality and culture. Individuals from minority groups, indigenous groups and persons with disabilities are encouraged to apply. We are committed to achieving a balanced gender distribution and therefore encourage women to apply.

All applications will be treated with the strictest confidence. MSF provides a work environment that reflects the values of gender equality, teamwork, integrity and a healthy balance of work and life. MSF does not tolerate sexual exploitation and abuse, any kind of harassment, including sexual harassment and discrimination. All selected candidates will, therefore, undergo reference checks.

Médecins Sans Frontières, as a responsible employer, under the¨Ley General de la Discapacidad de 2013 (LGD)¨ invite those persons with a recognized disability and with an interest in the humanitarian area to apply for the above-mentioned position.