Ruwwad Case Study

Supporting Ruwwad to Implement a Robust Data Protection Strategy

TL;DR

Venture 2 Impact partnered with Salesforce to assist Ruwwad Jordan, in implementing their data protection policy. Ruwwad needed help operationalizing their newly developed policy. The project involved assessing current data processes, and developing implementation recommendations. This initiative aimed to enhance Ruwwad’s data protection capabilities and ensure effective, organization-wide policy adoption

Partner Context

Venture 2 Impact teamed up with Salesforce to involve employees in global skills-based volunteer opportunities. Here, employees utilize their professional skill sets to assist nonprofit organizations. The aim of this skills-based volunteering initiative is to aid nonprofit organizations aligned with Salesforce’s mission while enhancing their capacity and impact.

ABOUT RUWWAD

Ruwwad is a non-profit community development organization that works with disenfranchised communities through education, youth volunteerism, and grassroots organizing. Ruwwad operates in Jordan, Lebanon, and Palestine. Ruwwad’s approach encompasses an array of programs and projects that strengthen, initiate, and facilitate redress to problems prioritized by members of the community. The four main programs that anchor Ruwwad are child development, adolescent development, youth organizing, and community support. Ruwwad’s main financial backers are entrepreneurs and its operations are facilitated through a strong network of partnerships with civil society and governmental agencies.

You can learn more here.

THE CHALLENGE: How might we support Ruwwad in developing and implementing their data protection policy?

CHALLENGE Context

Ruwwad has recently developed a first draft of their data protection policy and procedures. However, it has not been implemented across departments and remains in the draft phase. Unfortunately, while cyber security is a focus of the IT department at Ruwwad, there is limited capacity to implement risk management procedures in relation to data protection throughout the organization. Not only are staff required to undergo the implementation of the data protection procedures and processes, they are also required to educate their staff on the new policies as well as train the organization to utilize the new procedures.

Ruwwad works with many different forms of both hard and digital data and assets including:

The Innovation

During the project, volunteers undertook a comprehensive effort across three distinct phases to enhance data protection within the organization. First, volunteers began the volunteer program by conducting a thorough investigation of the existing data storage and protection processes, assessing them against the organizational data protection policy to identify gaps and areas for improvement. Next, volunteers met on a monthly basis alongside Ruwwad staff to formulate detailed recommendations aimed at aligning the organization’s practices with established data protection standards and procedures. Finally, the volunteers presented the new data protection policy to the Ruwwad staff, designed to demonstrate how to effectively operationalize the policy and detailed the practical steps necessary to implement the Data Protection Framework successfully.

Anticipated IMPACT

Immediate outcomes (1-2 weeks post-project)

Intermediate outcomes (3 months post-project)

PARTNER FEEDBACK

“Some of the concepts discussed will help us make good progress toward our goals with other volunteers. Furthermore, the volunteers highlighted areas of data protection that we had not considered earlier, which was helpful”