Data Privacy Officer

The Philippine Data Privacy Act of 2012 (DPA ) requires personal information controllers (PICs ) and personal information processors (PIPs ) to appoint a Data Protection Officer (DPO

A DPO should have expertise in relevant privacy or data protection policies and practices. The DPO should have sufficient understanding of the processing operations being carried out by OCSI, including its information systems, data security and/or data protection needs. Knowledge by the DPO of the sector or field in which OCSI operates and its internal structure, policies, and processes is also useful.

Duties And Functions

• monitor OCSI’s compliance with the DPA, the Implementing Rules and Regulations of the DPA, issuances by the National Privacy Commission (NPC) and other applicable laws and policies;
• ensure proper data breach and security incident management by OCSI, including the preparation and submission to the NPC of reports...