IT Data Protection Lawyer Digitizing Administration Tasks

Project overview

Background

The Digitalization Initiative is a comprehensive effort for digital transformation of key service areas within the Directorate of Health and Helfo. The overarching goal of the program is 'Simpler, equitable, and better services for users through modernization and efficiency in the administration of tasks managed by the Directorate of Health and Helfo.' The program has a time horizon up to 2029.

The Digitalization Initiative currently includes the Health Personnel project, the Helfo project, and the Internal Digitalization and AI project. The three projects focus on different service areas. The number of projects in the Digitalization Initiative may change, with more or fewer projects than the current three.

Concept studies have been prepared for all three ongoing projects. IT/data protection legal work is a central component in all projects. Sound assessments within data protection and IT law, including work with potential regulatory changes, are crucial for us to realize measures in the various projects.

Purpose

The purpose of the procurement is to cover the need for expertise in data protection and information security for the Digitalization Initiative program. The client therefore wishes to engage a consultant with legal expertise in IT law, data protection, and information security.

Upon contract start, the consultant will primarily be attached to the Health Personnel project. However, the client reserves the right to assign the consultant to projects within the Digitalization Initiative program during the contract period, to the extent necessary to meet the program's overall needs.

The consultant may also be tasked with assisting across projects or in activities that naturally support the implementation and coordination of projects within the program.

All tasks shall fall within the professional and competence area covered by this procurement. Changes in the consultant's assignment between projects are considered part of the contract's agreed scope and do not provide grounds for changing the contract's prices or other contractual terms.

The client will continuously decide which project or activities the consultant will assist, provided that the work tasks fall within the contract's purpose, professional area, and competence requirements.

One of the initial work areas will be within the Health Personnel project, which, according to its effect goals, aims to contribute to more efficient, quality-assured, and user-friendly administration of authorization and specialist approval for health personnel through increased digitalization, automation, and better system support.

The project aims to streamline case processing, strengthen the quality of assessments and decisions, and improve the user experience for applicants through increased guidance, self-service, and transparency. Furthermore, the quality and efficiency of communication with users will be improved, while compliance with regulations, data protection, and equal treatment are strengthened.

The project will also facilitate better utilization of data, strengthened management information, and more knowledge-based decisions. Through modernization of technology, architecture, organization, and financing models, the project will simultaneously build a sustainable platform for continuous service development and future digitalization of the area.

SCOPE AND ROLES

Assist the program with legal and data protection expertise, and work closely with the Directorate of Health's internal legal resources and data protection environment.

Responsibilities

• Assist in conducting data protection assessments and Data Protection Impact Assessments (DPIA).
• Assess legal bases for processing, data protection implications, and regulatory requirements.
• Contribute to legal assessments related to information sharing, data processing, and the use of AI solutions.
• Provide advice related to data protection regulations, public law issues, and related regulations.
• Contribute to the development and updating of guidelines, procedures, and governing documents.
• Participate in risk and security assessments in collaboration with other professional environments.
• Contribute to ensuring legal requirements are met in the project's deliverables.

Project details

• Start: flexible
• Duration: > 12 months
• Remote: onsite
• Location: Oslo, Norway, NO
• Languages: Norwegian