Compliance Officer for Privacy

Summary of Work Activities and Responsibilities:

Under the supervision of the Assistant Director, UDPO, the Compliance Officer for Privacy II is responsible for compliance management, incident management, and complaints resolution in support of the operations of the Office. The position also performs research and capacity building, and office management support.

Main Duties and Responsibilities:

• Registers the University’s data processing systems with the National Privacy Commission (NPC), and notifies the agency of any automated decision-making system of the University
• Monitors the data protection concerns of other offices in the University, as assigned by the Assistant Director
• Coordinates with various stakeholders (e.g. NPC, other data protection authorities, regulators, etc.) during compliance checks, data protection-related cases, investigations, and other similar activities
• Coordinates with both internal and external stakeholders when carrying out data protection-related work
• Assists in organizing and preparing preparatory and consultative meeting with stakeholders
• Prepares materials, reserves venues, and orders food for meetings headed/organized by the Office
• Coordinates arrangements for guests of the Office (e.g. parking slots, entry, egress, etc.)

• Prepares Security Incident Response Team Assessment Reports and submits to the Assistant Director for review and approval
• Coordinates with University offices/units when addressing security incidents or data protection-related complaints
• Gathers information and materials on data privacy, data protection, and other related topics when resolving issues/concerns encountered by the University that involve data privacy
• Drafts responses for the resolution of common data protection-related issues and inquiries
• Reviews and drafts data sharing agreements, subcontracting or outsourcing agreements, and other similar contracts relating to data protection
• Monitors the data protection concerns of other offices/units of the University and provides advice as needed

• Coordinates with various stakeholders in the resolution of policy questions and other legal issues relative to data protection
• Analyzes news and reports on issues and provides advice on their anticipated impact/s on the data protection framework of the University
• Serves as a resource speaker on topics involving data protection in trainings, workshops, and similar activities
• Prepares information, education, and communication materials on data protection
• Monitors the news for key data protection issues that may affect or impact the University
• Collects, analyzes, drafts, and reviews internal and external policies relating to data privacy and submits to the Assistant Director for review

• Attends meetings, conferences, hearings, consultations, and other similar work-related events on behalf of the Office
• Prepares minutes of the meeting, progress reports, post-activity reports, and other documentation materials for events or activities involving the Office
• Takes photos and audio recordings of events or activities where the Office is involved
• Prepares office-related materials such as memoranda, templates, activity designs, concept notes, studies, and slide presentations and submits to the Assistant Director for review

Supervisor and authorized representative.