Consultancy on legal and regulatory frameworks on data protection, right to privacy, freedom of assembly, in Georgia and Ukraine

Time-Limited Contractual
Application Closing Date
7th February 2022 09:00 GMT


Privacy International (PI) is developing a project to expand its outreach in Eurasia and seeks to understand the need and urgency for strengthened privacy safeguards and protections for people in Eurasia and meaningfully engage with civil society in the region.

We have identified Ukraine and Georgia as priority countries for our engagement in 2022.


Purpose of the Consultancy
The aim of this research is to give us a greater understanding of the legal and regulatory framework in the priority countries (Georgia and Ukraine) and to serve as a high-quality internal resource for PI to inform our strategy and frame future research and engagement in the countries, as well as to support our on-going work.

The purpose of the consultancy would be to provide a mapping and a brief assessement of:

  1. international and regional (e.g. Council of Europe) human rights law applicable (including data protection standards) in the priority countries and relevant recommendations made by international and regional human rights bodies regarding those countries;
  2. national legal framework and standards (constitutional and other laws) protecting human rights, and the mandate of relevant monitoring oversight bodies (e.g. human rights ombudsperson, national human rights commission)
  3. surveillance legislation and legislation regulating the surveillance powers particularly of security, intelligence agencies and law enforcement, including mechanisms of oversight (e.g. independent commissioners; parliamentary committees, etc.)
  4. data protection legislation, including mechanisms of oversight (e.g. data protection authority)

The mapping of policy, legal and regulatory instruments involves a detailed description of existing policies, laws and regulations.

Specifically, we expect the mapping to include:
i) Existing standards that govern the use of technology, with a particular focus on the existence or non-existence of references to data, privacy, or security in Georgia
ii) Existing standards that govern the use of technology, with a particular focus on the existence or non-existence of references to data, privacy, or security in Ukraine

The mapping need to include references to applicable laws, relevant jurisprudence (national and regional, e.g. European Court of Human Rights), to relevant reports of national oversight authorities, and to authoritive reports (e.g. UN and regional human rights mechanisms, civil society organisations) that provide an assessment of the relevant laws, policies and practices.

The consultant will have international research experience. They will have a background on research, law/policy, or technology and have a demonstrable ability to collect, interpret, and summarize policy from a wide variety of resources. They will be expected to be able to analyse laws etc in the official languages of the country concerned.

  • The consultant shall ensure that only clearly lawful methods of research are used.
  • The consultant shall provide documentation and/or references to support analyses which can be verified by PI.
  • The consultant shall ensure that any information obtained from fee-based online databases is done so in line with the database’s terms of service.

Outputs, Timelines, and Remuneration
Two completed, comprehensive briefings and analysis are to be delivered by 30 April 2022 as per a schedule of deliverables to be agreed between PI and the selected consultant. All the data and evidence mentioned in the briefings should be free to publicly use without constraints.

The consultancy is expected to last a maximum total of 25 days. Remuneration is £300 per day, and the total fee to be awarded shall not exceed £7,500.

Please send a copy of your CV, accompanied by brief cover statement, to by 0900 BST on 7 February 2022. We expect to make the selection of the consultant by 21 February.


See how we handle your data.