Junior Assistant – Data Protection Unit

The Data Protection (DP) Unit plays a central role in ensuring that the Authority complies with applicable data protection laws and regulatory requirements, including the General Data Protection Regulation (GDPR). It is tasked with promoting a culture of privacy and data protection across the Authority by embedding data protection principles into all operations and activities that involve the processing of personal data.

This Unit monitors and evaluates the Authority’s data processing practices to ensure that personal data is collected, used, stored, and shared in a manner that is lawful, fair, transparent, and secure. It provides expert advice and guidance to all functions on data protection matters, including the interpretation and application of legal requirements, the design of privacy-friendly systems and processes, and the adoption of best practices.

In addition, the Unit is responsible for carrying out Data Protection Impact Assessments (DPIAs) in cases where data processing is likely to result in high risks to individuals’ rights and freedoms. The Unit is also responsible for providing recommendations on how such risks can be mitigated. It also manages and responds to data subject rights requests—such as access, rectification, erasure, restriction, and objection—within statutory timeframes, and ensures that appropriate procedures are in place to facilitate the exercise of these rights.

Furthermore, the Unit contributes to the development and review of internal policies, procedures, and contracts to ensure that personal data is handled in accordance with legal obligations. It also supports incident response efforts in the event of a data breach, working closely with relevant stakeholders to investigate, contain, and report incidents as necessary.

Ultimately, the DP Unit serves as a point of reference for both internal staff and external stakeholders on matters related to data protection, fostering accountability and helping the Authority maintain the trust of individuals whose data it processes.

About the Role

The Junior Assistant will be carrying out the following duties:

• Assisting in the collation, review, and updating of records of processing activities (ROPAs) and other documentation related to data protection compliance;
• Supporting the coordination of data subject rights requests, such as access, rectification, or erasure, under the guidance of the Data Protection Officer (DPO);
• Carrying out research and assisting in the analysis of data protection legislation, regulatory updates, and relevant guidance thereto;
• Providing support in the reviewing of DPIAs;
• Assisting in reviewing and maintaining Data Processing Agreements and other contractual documents involving the sharing or processing of personal data;
• Supporting the documentation and preliminary follow-up of data breach incidents in accordance with internal protocols and regulatory timelines, as directed by the DPO;
• Communicating and liaising with internal stakeholders to support awareness and compliance efforts;
• Performing any other duties as may be assigned by the DPO or senior management according to exigencies as may be required.

About You

To qualify for this role, you will need to be currently reading for a first degree in any of the following subjects: law and/or any other related course. Applicants reading for a first degree in Information Technology or Computer Science and in possession of Privacy Certification focusing on the General Data Protection Regulation will also be considered.

The applicant must also possess: the ability to multi-task and work both on own initiative and in a team; good knowledge of MS Office, particularly MS Excel and MS PowerPoint; have good verbal and written communication skills; and have a desire to learn.

Additional Information

The MFSA is an Equal Opportunities Employer as certified by the NCPE (National Commission for the Protection of Equality) and is committed to a policy of equal opportunity in all aspects of employment and will take care to avoid any form of discrimination in its recruitment procedures. The MFSA reserves the right to withdraw this call at any time and not to select any of the Candidates.

It is the responsibility of applicants in possession of qualifications awarded by Universities and other similar institutions outside Malta to produce a recognition statement on comparability of qualifications issued by the Malta Qualifications Recognition Information Centre (MQRIC). Applicants should do so preferably at application stage or otherwise at the preliminary interview should an applicant be selected for such interview. Details can be obtained by accessing the National Commission for Further and Higher Education website on www.ncfhe.gov.mt under MQRIC heading.

The MFSA shall ensure that any processing of personal data is in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation), the Data Protection Act (Chapter 586 of the Laws of Malta) and any other relevant European Union and national law. For further details, you may refer to the Data Privacy Notice on the MFSA webpage - https://www.mfsa.mt/privacy-notice/.

Candidates are to note that the submission of any false statement/s or omission, even if unintended, may lead to the cancellation of their application and may render the candidate's appointment liable to termination.

Furthermore, please note that candidates may be asked to submit any documentation in support of the information provided, including but not limited to, proof of qualifications and Police Conduct Certificates.

Public Call Permit: 368/2023