Data Privacy Officer (DPO)

About the role

The Data Privacy Officer (DPO) will ensure that the organization complies with the Philippines’ Data Privacy Act, its implementing rules, and related regulations issued by the National Privacy Commission. The DPO acts as the primary point of contact for data subjects, regulators, and internal stakeholders on privacy matters.

Key responsibilities

• Monitor and assess the organization’s compliance with the Data Privacy Act, its IRR, and NPC issuances.
• Maintain a record of processing activities and evaluate third‑party service providers for privacy compliance.
• Provide advice, recommendations, and guidance on privacy impact assessments, data sharing agreements, and risk mitigation.
• Handle data subject requests, complaints, and exercise of rights, ensuring timely response.
• Oversee data breach and security incident management, including reporting to the NPC within prescribed timelines.
• Promote privacy awareness and training across the organization.
• Collaborate with the NPC and other authorities on privacy‑related matters.
• Support the development and revision of privacy policies, procedures, and “privacy by design” initiatives.

Required profile

• Bachelor’s degree in Law, Information Technology, Computer Science, Business Administration, Human Resources, or a related field.
• 3–5 years of experience in data privacy, data protection, compliance, information security, risk management, legal, or governance.

Required skills