Data Privacy Officer Orientation

The ______________ will be accountable for ensuring compliance by the PIC or PIP with the Data Privacy Act, its IRR, related issuances of the National Privacy Commission, and other applicable laws and regulations relating to data privacy and security

• Data Protection Officer

• Local Government Unit

• Data Subject

• DICT

_________refers to a person or organization who controls the collection, holding, processing or use of personal information, including a person or organization who instructs another person or organization to collect, hold, process, use, transfer or disclose personal information on his or her behalf.

• Personal information controller

• Personal information processor

• Data Protection Officer

• Privacy Impact Officer

As a PIC or PIP, I am not allowed to outsource or subcontract the DPO functions.

• TRUE

• FALSE

While the responsibility of complying with the DPA, its IRR, issuances by the NPC, and other applicable laws remains with the PIC or PIP, malfeasance, misfeasance, or nonfeasance on the part of the DPO or COP relative to his designated functions may still be a ground for administrative, civil, or criminal liability, in accordance with all applicable laws.

• TRUE

• FALSE

A PIC or PIP, taking into account the complexity of its operations, is not allowed to have more than one data protection officer.

• FALSE

• TRUE

_________________ is a process undertaken and used to evaluate and manage the impact on privacy of a particular project, program, process or measure;

• Personal Information Processing

• Privacy Impact Assessment

• Data Collection

• Privacy Management System

Commission Officer for Privacy” or “COP” refers to an individual or individuals who shall perform some of the functions of a DPO.

• FALSE

• TRUE

An act protecting individual personal information in information and communications systems in the government and the private sector, creating for this purpose a national privacy commission, and for other purposes.

• REPUBLIC ACT NO. 10173

• REPUBLIC ACT NO. 10175

• REPUBLIC ACT NO. 10844

• REPUBLIC ACT NO. 10157

Ensure the conduct of Privacy Impact Assessments relative to activities, measures, projects, programs, or systems of the PIC or PIP.

• Corporate Officer for Privacy

• Privacy Impact Officer

• Data Collection Officer

• Data Protection Officer

___________ refers to any freely given, specific, informed indication of will, whereby the data subject agrees to the collection and processing of personal information about and/or relating to him or her. Consent shall be evidenced by written, electronic or recorded means. It may also be given on behalf of the data subject by an agent specifically authorized by the data subject to do so.

• Personal information controller

• Personal information processor

• Rights of the data subject

• Consent of the data subject