Data Privacy Officer

DUTIES AND RESPONSIBILITIES

1. Data Privacy Governance & Compliance

a. Serve as the official Data Privacy Officer registered with the National Privacy Commission
(NPC).

b. Ensure organizational compliance with RA 10173, its Implementing Rules and Regulations
(IRR), and NPC advisories and circulars.

c. Develop, implement, and maintain data privacy and risk policies, procedures, and
standards.

d. Lead the conduct of Privacy Impact Assessments (PIA) for new products, systems, and
processes.

e. Ensure proper data classification, retention, disposal, and archival in accordance with legal and regulatory requirements.

1. Risk Management & Control

a. Facilitate and lead the conduct of regular risk assessments, including data privacy,
operational, and information security risks across head office and branch/unit operations.

b. Integrate data privacy risks into the organization's enterprise risk ma...