Privacy Officer

Project overview

What will you do

For GGD West-Brabant, we are looking for a Privacy Officer.

Privacy and information security are of great importance for the services of the GGD. Handling personal data carefully and complying with laws and regulations such as the AVG are essential. As a Privacy Officer, you play an important role in safeguarding the privacy of citizens, employees, and chain partners. You advise the organization on privacy issues, conduct DPIAs, and contribute to a structural and sustainable design of privacy governance within the organization.

Your tasks include preparing DPIA processes by collecting relevant documentation, process descriptions, and policy documents. You also conduct interviews and work sessions with process owners, employees, the CISO, information advisors, functional administrators, and other stakeholders. You describe intended processing activities, purposes, data categories, data subjects, recipients, and retention periods. You also assess the necessity, proportionality, and lawfulness of processing activities.

You identify and analyze privacy risks for data subjects and determine appropriate technical, organizational, and legal control measures. You prepare DPIA reports in accordance with the DPIA model used within the organization and discuss findings and recommendations with process owners and management. You also support the preparation and monitoring of improvement measures and ensure complete and traceable documentation of the DPIA process.

Together with colleagues, you work on strengthening privacy awareness, compliance, and data protection within the organization. You make an important contribution to the responsible processing of personal data and the management of privacy risks within the GGD.

For important information about the assignment, see 'Extra info'.

What needs to be delivered?

Who are you?

What else you should know

IMPORTANT:

Timeline:

Further:

• 2 conducted and documented DPIAs per designated processing activity or project, with a potential for 3 DPIAs;
• An overview of identified privacy risks;
• A concrete action plan with prioritization of control measures;
• Advice regarding compliance with AVG, privacy policy, and relevant standards;
• Transfer of findings and recommendations to the responsible process owners.
• You have a Bachelor's or Master's work and thinking level and at least 1 year of work experience as a Privacy Officer;
• You have demonstrable experience with conducting DPIAs within the public or healthcare sector;
• You have thorough knowledge of the AVG, the AVG Implementation Act, and relevant privacy guidelines;
• You have knowledge of relevant laws and regulations within healthcare and/or NEN 7510;
• You are independent and self-reliant, but certainly not a loner;
• You are visible, results-oriented, have a hands-on mentality, are proactive, curious, and eager to learn, show courage, and have persuasive power;
• You are happy to share your knowledge, both when asked and unasked. You are creative in finding solutions;
• You have experience with risk management and privacy governance;
• You are well-informed about developments in privacy, data protection, and information security;
• It is a plus if you have a CIPM and/or CIPP/E certification;
• It is a plus if you have a legal background;
• Experience with processing personal data within municipal collaborations, GGDs, or other government organizations is a plus;
• You have good communication skills in word and writing. You are able to translate complex matters into understandable language, both orally and in writing.
• Freelancers excluded due to regular work activities.
• Start as soon as possible.
• Hybrid is possible with on-site presence where necessary. For example, GGD Hart voor Brabant in Tilburg
• Scale 10 position
• Supplier proposal deadline: Monday 26-10 at 12:00.
• First review of CVs & proposal to the client: Monday afternoon 26-10
• Feedback on CVs and interview invitations: Tuesday/Wednesday 27/28-10
• Introductory interviews: TBD (end of next week)
• Feedback on interviews: after the interviews
• Please submit the CV in Dutch.
• If we receive feedback from the GGD after we have proposed the candidate, we will contact the supplier/freelancer directly.
• If there is sufficient supply, we will close the role earlier than the indicated deadline in the portal. Therefore, submit a suitable candidate as soon as possible.
• It is not permitted to insert an extra link between the candidate and the supplier offering the candidate.
• A supplier may submit a maximum of 2 CVs.
• We also request that the personal motivation includes a substantiation demonstrating that the candidate possesses the required competencies.
• The candidate possesses a proof of identity (a passport or identity card), which is valid at intake and on the start date of the candidate's contract and can be presented for verification.
• The VNG Model General Procurement Conditions for supplies and services apply to every assignment.
• The transfer period for flexible workers is 1,700 hours.
• Indexation does not apply.
• A valid Certificate of Conduct (VOG) is required for every placement. The costs for this are borne by the supplier and must be included in the rate. The candidate may only start once the VOG (digital) has been received.
• Upon termination of an assignment, the following notice periods apply from GGD West-Brabant, GGD Hart voor Brabant, and Regional Ambulance Service Brabant Midden-West-Noord (RAV):
• Worked between 1 and 12 weeks: notice period of 5 days
• Worked longer than 12 weeks: notice period of 1 month
• In case of force majeure: immediate
• The rate depends on the knowledge and skills of the candidate.
• Please propose the candidate with an all-in rate, including travel expenses excluding VAT.

Project details

• Start: 2026-11-02
• Duration: 2 nov 2026 - 31 dec 2026
• Location: Breda, NL
• Rate: 90-90 EUR/h
• Languages: Dutch