Functions, duties, and responsibilities
The Data Privacy Office (DPO) ensures that DHVSU observes the following:
- Compliance with Data Privacy Laws: The DPO ensures that the university adheres to data privacy laws and regulations. This includes the Data Privacy Act of 2012 in the Philippines.
- Safeguarding Personal Information: DHVSU handle vast amounts of personal data, including students’ records, financial information, and health data. The University DPO oversees the protection of this sensitive information. In coordination with the other university offices, and academic units, the DPO implement security measures to prevent unauthorized access, breaches, or leaks.
- Risk Mitigation: The University DPO assesses risks related to data processing activities. They identify vulnerabilities, evaluate potential threats, and recommend risk mitigation strategies. This proactive approach helps prevent data breaches and legal repercussions.
- Transparency and Accountability: The DPO ensures transparency by informing individuals about how their data is collected, processed, and used. They facilitate data subject rights, such as access requests and rectification. Additionally, the DPO is accountable for data protection practices within the agency.
- Training and Awareness: The DPO educates the university personnel staff about data privacy principles, policies, and best practices. Regular training sessions raise awareness and promote a culture of privacy-conscious behavior.
- Collaboration with National Privacy Commission: The DPO liaises with the NPC, seeking guidance, clarifications, and approvals when necessary. Through the DPO, the university stays informed about evolving privacy requirements and adapt university practices accordingly.