Data Protection and Privacy Masterclass

Event Details

AmCham will host a Data Protection and Privacy Master Class facilitated by PwC on October 18, 19 and 21, 2021 from 9a.m. - 12noon EAT. The training will consist of 13 learning modules designed to educate participants on:

The Data Protection Act 2019,
Data privacy challenges faced by Kenyan and multinational organizations,
How to put data protection principles into practice,
Implementing a data privacy program including lessons learnt and best practice.

The Master Class will be interactive and will consist of classroom-based learning, case studies and panel discussions with global leaders in data protection to offer comparative views of enforcement of data protection laws in different markets.

The Master Class is designed for participants in the roles: data privacy officers, IT and information security system officers, legal officers, risk and compliance officers, HR officers and business process officers.

We encourage organizations to send all key officers for the Master Class.

Facilitators

Joseph Githaiga

Associate Director, PwC

Benjamin Mkwizu

Associate Director, PwC

Jamila Aroi

Associate Director, PwC

Audrey Onsomu

Manager, PwC

Jehaan Ara Kurji

Senior Associate, PwC

Joseph is an accomplished corporate lawyer and compliance professional with over 20 years of experience. He is a Certified Information Privacy Manager (CIPM) and a Certified Information Privacy Professional/Europe (CIPP/E). Joseph engages with our largest clients to understand their data privacy challenges to make sure that our services are appropriate to meet them.

Prior to joining PwC, Joseph headed up the compliance function for Standard Chartered Bank in East Africa. Before that, he worked with a leading Kenyan law firm, Coulson Harney (now Bowmans), for four years. He also practiced in Australia for 11 years, including stints as in-house legal counsel for Macquarie Bank Limited and Westpac Banking Corporation / BT Financial Group in Australia.

Relevant experience
Leading numerous DPA engagements and conducting privacy program gap assessments based on the Data Protection Act 2019.
Delivering tactical recommendations and strategic roadmaps to enhance his clients’ privacy programs.
Delivered privacy trainings at numerous clients. His audiences have included Boards, ExCos, Legal and risk management teams as well as business units and operational staff.
Publication of thought leadership articles on the GDPR and the Data Protection Act 2019.

Qualifications
Solicitor of the Supreme Court of New South Wales and High Court of Australia
Certified Information Privacy Manager (CIPM)
Certified Information Privacy Professional/Europe (CIPP/E)
Bachelor of Laws degree
Bachelor of Commerce degree
Advocate of the High Court of Kenya

Overview
Benjamin is an Associate Director with our Risk Assurance department. He has extensive experience in the carrying out IT audits and business process reviews assignments for a wide range of our clients across private and public sectors.
His areas of expertise include assessing effectiveness of IT systems in supporting key business processes for organisations. He has over 11 years of experience in performing quality assurance over system implementations, information security reviews, system post implementation reviews, systems audits and business processes bench marking assignments.

Relevant experience
Network and infrastructure security controls assessment
Cybsecurity governance and cybersecurity risk management
Vulnerability assessment and penetration testing
Network and infrastructure security controls assessment
Cybersecurity incident management procedures
Third party security assessment
Network and infrastructure security controls assessment
Vulnerability assessment and penetration testing

Qualifications
Member of the Information Systems Audit and Control Association (ISACA)
EC-Council
Certified Information Systems Auditor (CISA)
Certified Information Security Manager (CISM)

Overview
Jamila is an Associate Director in our Risk Assurance Services department. She has over 14 years’ of experience in professional consulting, specializing in risk-based reviews of specific controls in complex IT environments, enterprise-wide and IT risk assessments in clients within the financial services, government, education and manufacturing sectors both in the United Kingdom, South and East Africa markets.

Relevant experience
Delivering data privacy awareness trainings
Performing comprehensive ICT audits, pre and post implementation reviews, business controls reviews and quality assurance reviews for system implementations.

Relevant Qualifications
Certified Data Privacy Solutions Engineer (CDPSE)
Certified Public Accountant
Certified Information System Auditor (CISA)
Bachelor of Commerce

Overview
Audrey is a Manager within the Risk Assurance Practice, she demonstrates thorough knowledge and understanding of governance, risk, compliance, assurance and audit processes.

Audrey has helped clients, including fortune 500 clients improve risk management processes, business processes and related controls through consultative and assurance services whilst mitigating critical risks through leading teams, reviewing and evaluating the effectiveness and adequacy of internal processes and controls and preparation of final deliverables to the client. She is knowledgeable on conducting risk assessments, gap analysis, recommending remedial action, risk register preparation among others.

Relevant experience gained the years
Audrey’s experience includes training on a range of governance, risk and compliance issues. Her areas of expertise include:
Enterprise Risk Management (ERM)
Data protection reviews
Business Processes and Controls review
Business Continuity Management
Internal Audit
Corporate Governance
Sarbanes Oxley (SOX)/ ICFR compliance
AML/CFT compliance reviews
Anti Bribery and Anti Corruption/ Whistleblowing

Qualifications
Bachelor's Degree in Commerce, Finance (1st class honors) –University of Nairobi
Certification in Risk Management in Financial Services (IRM, UK)
Certified Public Accountant (CPA)
Certified Anti Money Laundering Specialist(CAMS)

Overview
Jehaan is a Senior Associate in the Legal & Regulatory Compliance Advisory business unit at PwC Kenya. She actively engages with her clients, helping them in identifying the personal data they possess, protecting their data, remaining in compliance with privacy commitments and the Data Protection Act, and enhancing their overall privacy and security programs. She has lead her team on various data privacy program assessment projects and has worked with clients across various industries

Relevant experience
Delivering privacy awareness trainings
Holding privacy workshops to create a detailed business process maps with privacy and data protection control narratives
Assisting clients with data inventories and data flow charting
Assess information gathered from workshops against the requirements of GDPR/ DPA
Assisting in data discovery exercises to draft the data maps for business processes across the organization
Conducting privacy and cybersecurity maturity assessments and remediation plans
Experience testing cybersecurity and privacy controls to identify potential gaps and develop remediation plans.

Education
Bachelor of Laws degree
Masters in Business Administration degree
Advocate of the High Court of Kenya

Training Schedule

October 18, 2021
October 19, 2021
October 21, 2021

October 18, 2021

Main Schedule

9:00 AM - 9:10 AM

Opening

9:10 AM - 9:15 AM

Introductions

Joseph Githaiga

9:15 AM - 9:35 AM

Module 1: Overview of Kenya’s data protection laws

Joseph Githaiga

9:35 AM - 9:55 AM

Module 2 : Understanding data privacy challenges

Identifying risks and gaps: An introduction to the 8 domains of data privacy

Joseph Githaiga

9:55 AM - 10:00 AM

Break

10:00 AM - 10:20 AM

Module 3: Strategy Governance and Accountability

● Organizational strategy
● DPO designation
● Governance structure
● Training and awareness

Jehaan Ara Kurji

10:20 AM - 10:40 AM

Module 4: Privacy Notice and Policy Management

● Policies, standards and guidelines
● Transparent and concise communication

Jehaan Ara Kurji

10:40 AM - 11:00 AM

Module 5: Data Lifecycle Management

● Data classification and inventory
● Data flow maps
● Data quality

Jamila Aroi

11:00 AM - 11:25 AM

Module 6: Data subject rights and processing

● Transparency and accountability
● Lawful bases for processing
● Consent
● Responding to data subject requests and inquiries
● Automated decision making

Jehaan Ara Kurji

11:25 AM - 11:30 AM

Break

11:30 AM - 12:00 PM

Module 7: CASE STUDY

Individual Ticket

This ticket covers attendance for one individual only

Standard PriceKSh25,000

American Chamber of Commerce, Kenya

Contact us

Event Details