REQUEST FOR EXPRESSIONS OF INTEREST - CONSULTING SERVICES FOR THE DEVELOPMENT OF CYBERSECURITY, CYBERCRIMES AND CHILD ONLINE PROTECTION LEGAL FRAMEWORKS AND GUIDELINES FOR THE EAST AFRICAN COMMUNITY
(CONSULTING SERVICES - FIRMS SELECTION)
REF NO: TZ-EAC-385066-CS-QCBS
East African Regional Digital Integration Project (EARDIP)
Project ID No/Loan No./Credit No./ Grant No.: (P176181)
Date of Issue: 22nd August 2025
CONSULTING SERVICES FOR THE DEVELOPMENT OF CYBERSECURITY, CYBERCRIMES AND CHILD ONLINE PROTECTION LEGAL FRAMEWORKS AND GUIDELINES FOR THE EAST AFRICAN COMMUNITY
The East African Community has received financing from the World Bank toward the cost of the Eastern Africa Regional Digital Integration Project (EARDIP) and intends to apply part of the proceeds for consulting services.
The consulting services (the Services) include the development of cybersecurity, cybercrimes and child online protection guidelines, principles and rules for the East African Community (EAC). The assignment is expected to be completed within 180 days.
Specifically, the assignment aims to develop harmonised codes of conduct, guidelines, principles and cybersecurity, cybercrime, and child online protection across the EAC region. The consultancy will also provide practical recommendations to enhance regional coordination, enforcement and protection of critical information infrastructure. It will further offer an actional roadmap to EAC Partner States on the ratification or accession to international cybercrime conventions, such as the Budapest and UN Conventions.
Overall, this assignment aims to strengthen regional cooperation and trust in the digital space across the EAC. By addressing current legal gaps and inconsistencies, it will support a safer, more secure digital environment. The work will promote shared standards and principles that enable countries to respond to cyber threats more effectively. It also prioritizes child online protection as a key area of focus. Through this effort, the region will be better aligned with global best practices. Ultimately, it supports the broader goal of building resilient and trusted digital ecosystems.
The detailed Terms of Reference (TOR) for the assignment can be found at the following website: https://www.eac.int/opportunities/consultancies
The EAC Secretariat now invites eligible consulting firms (Consultants’) to indicate their interest in providing the services. Interested Consultants should provide information demonstrating that they have the required qualifications and relevant experience to perform the services described.
The shortlisting criterion is as follows:
- Firm’s Existence: The firm must have been legally registered and in operation for at least five (5) years before the tender closing date, with verifiable proof.
- Experience: The firm must provide evidence of successfully completing at least three (3) similar or related consultancies in the last five (5) years, including project descriptions, client details, duration and reference letters, if available.
- Technical Expertise: Demonstrated experience in Cybercrime, Cybersecurity and Child Online Protection legislative frameworks, Codes of Conduct and guidelines.
- Stakeholder Engagement: Experience working with both public and private sector stakeholders in the field of Cybercrime, Cybersecurity and Chile Online Protection.
- Regional Experience: Proven experience in a multi-country context within Eastern Africa, Horn of Africa or comparable regional integration projects, particularly in digital policy and harmonisation.
- Organisational and Staffing Capability: The firm must demonstrate a clear structure, managerial capacity and the ability to deploy qualified personnel.
Interested Consultants’ attention is drawn to Section III, paragraphs 3.14, 3.16 and 3.17 of the World Bank’s Procurement Regulations for IPF Borrowers (November 2020, revised September 2023), which outline the World Bank’s policy on conflict of interest.
Consultants may associate with other firms to enhance their qualifications but must clearly indicate whether the association is in the form of a joint venture (JV) or a sub-consultancy. In the case of a joint venture (JV), all partners shall be jointly and severally liable for the entire contract if selected. Therefore, each JV member must independently meet the evaluation criteria requirements. The experience, technical capability, and managerial capability of a sub-consultant shall not be considered to enhance the qualifications of the lead firm or JV.
A Consultant will be selected using the Quality and Cost-Based Selection (QCBS) method as outlined in the Procurement Regulations.
Further information may be obtained at the address below during office hours (9:00 AM to 5:00 PM EAT). The consultants would be responsible for ensuring that any addendum available on the website is also downloaded and incorporated.
Expressions of Interest must be submitted in English (one original and two copies, where applicable) in written form, either in person or via email, to the address below. The submission deadline is Monday, 8th September 2025, at 11:00 AM (EAT). The subject line should be: "Harmonising Cybersecurity and Cybercrime Frameworks for the EAC Region."
The Secretary General
Attn: EARDIP
East African Community (EAC) Headquarters
P.O. Box 1096
Arusha, Tanzania
Tel: +255-27-2162100
Fax: +255-27-2162199
Email: This email address is being protected from spambots. You need JavaScript enabled to view it., Cc: This email address is being protected from spambots. You need JavaScript enabled to view it.
Download the ToRs: CONSULTING SERVICES FOR THE DEVELOPMENT OF CYBERSECURITY, CYBERCRIMES AND CHILD ONLINE PROTECTION LEGAL FRAMEWORKS AND GUIDELINES FOR THE EAST AFRICAN COMMUNITY