Data privacy Legal Consultant - ScaleSmart Program

Context & Background

Berytech is a leading organization in the Entrepreneurial Ecosystem in Lebanon, that aims to provide a conducive environment for the creation and development of startups, through incubation, business support, counseling, funding, networking, and the company hosting, hence taking part in the economic revival of the country, participating in wealth and job creation, and retaining graduates and high-level skills in Lebanon.

The ScaleSmart program aims to support pre-seed or seed startups working in different sectors to scale up by equipping them with the knowledge and tools necessary to plan a solid fundraising path, matching them with investors and investment opportunities, and improving their chances of successfully raising funds. One of these startups is a pioneer in the cybersecurity field and requires proper guidance on standards, compliance and privacy

Scope of work

The Scalesmart Program seeks to train the startup on relevant Legal Matters. The selected candidate will be required to deliver up to 2 one one-on-one with the startup and cover the following topics

• Requirements for international expansion notably in the GCC region first
  • How different GCC Countries treat Data Security, privacy, and IP, such as the Qatar Data Protection Law (Law No. 13 of 2016), UAE’s DIFC Data Protection Law, and Saudi Arabia’s KSA Data Privacy Law.
  • Identify each country governing cyber security strategy Qatar National Cyber Security Strategy (QNCSS), UAE National Cybersecurity Strategy (2019), Saudi National Cybersecurity Authority (NCA) Framework
  • Cross-border data transfer laws: Discuss the legal risks and enablers of data transfers across regions.
• International expansion clarity: Identify the best way to enter a country whether through establishing an entity or going through partners and resellers
• Licensing and regulatory approval including certifications and accreditations needed for expansion in the GCC region starting by Qatar
• Contractual and Client Agreements such as Service Level Agreements (SLA), Non-Disclosure Agreements, Commercial agreements etc.…
• Other important documentation: Terms and conditions, liability etc.
• Crisis Management: To implement in case of a cyber attack

Deliverables

• Up to 2 one-on-one clinics for the startup
• Legal documentation guidance for expansion in the GCC
• Adherence to all laws and data privacy regulation
• Guidance over commercial agreements with resellers or other entities

Qualifications

• Minimum License in Law with 8 years of experience in corporate laws
• Extensive experience working with Cybersecurity companies (Password managers, secure browsers, infrastructure)
• Strong Knowledge of requirements and certifications related to Cybersecurity in the GCC