Consultancy Services for the Design, Development and Deployment of a Web-Based Data Protection Compliance Management System

DIGITAL ZAMBIA ACCELERATION PROJECT (DZAP) REQUEST FOR EXPRESSIONS OF INTEREST (CONSULTING SERVICES – FIRMS SELECTION) COUNTRY : Zambia NAME OF PROJECT : The Digital Zambia Acceleration Project (DZAP) Loan No./Credit No./ Grant No.: P505094 Name of Implementing Agency: Smart Zambia Institute (SZI) Assignment Title: Selection of a Consulting Firm for the Design, Development, and Deployment of a Digital Data Protection Compliance Management System for the Data Protection Commission of Zambia Reference No .: ZM-SZ-554941-CS-QCBS Background The Government of the Republic of Zambia (GRZ) has received financing from the World Bank to accelerate countrywide digital transformation through the Digital Zambia Acceleration Project (DZAP) and intends to use part of the proceeds of the credit to accelerate country-wide digital transformation under the Digital Zambia Acceleration Project (DZAP) and intends to apply part of the proceeds for Consulting Services for the Design, Development, and Deployment of a Digital Data Protection Compliance Management System for the Data Protection Commission of Zambia Objectives of the assignment The overall objective of this assignment is to deliver a fully functional, secure, and scalable digital DPCMS that serves as the digital backbone of the DPC's regulatory operations, a single, integrated platform through which data handlers register and manage their compliance obligations; data subjects exercise their statutory rights under the Act; the DPC conducts investigations, issues determinations, and enforces the law; and the public accesses transparent regulatory information through open registers and published decisions. The Scope of services The Consultant shall design, develop, test, deploy, and support a digital DPCMS comprising integrated functional modules. The system shall be responsive across desktop, tablet, and mobile devices; accessible in conformity with WCAG 2.1 Level AA; built in compliance with ISO/IEC 27001, ISO/IEC 27701, and O