Title:  Data Protection Associate 1

1. Implementation of Data Privacy Awareness Programs

     - Conduct DPA Awareness Training sessions

     - Prepare post training reports and certificates

     - Assist in publishing Data Privacy Awareness campaigns through corporate platforms including email blast, lobby ads channel, posters, employee portal

2.  Assist in managing Data Privacy Councils

     - Work with the Head of DPSO about Councils’ meetings and events

     - Prepare assigned presentation materials

     - Facilitate Council’s meetings and events

     - Prepare minutes of the meeting

     - Coordinate with appropriate stakeholders about discussions that need further collaboration or action

     - Receive and acts/escalates requests and concerns from the Council members

     - Cascade or coordinates directions or requirements from SMC DPSO to the Councils.

3.  Assist in the management of Data Privacy Compliance Monitoring System

     - Coordinate with businesses the submission of Data Privacy Compliance Monitoring Reports (DPCMRs)

     - Consolidate DPCMRs and coordinate observations or insufficiencies with the businesses

     - Analyze DPCMRs and prepare management report

4.  Assist in the management of third-party contracts and data sharing agreements

    - Maintain contracts and data sharing agreement tracker

    - Review and coordinate with the DPOs and/or contract proponents of businesses as well as CSU COPs and/or contract proponents any contract without data privacy provision, in coordination with the OGC in-house notary public

5. Assist in maintaining SMC Data Privacy regulatory compliance requirements

    - Review NPC registration documents

    - Maintain SMC Data Privacy Manual and Privacy Management Programs

6. Assist in ensuring compliance to requirements of National Privacy Commission

    - Registration of Data Protection Office and Company

    - Registration of Data Processing System

    - Submission of Annual Security Incident Report
    - Submission of documents and reports as may be required by NPC

7. Assist in the execution of regular Privacy Impact Assessment (PIA) of processes, programs, projects, measures, systems and technology (PPPMST) including changes and automation of such

     - Conduct threshold analysis of PPPMST

     - Conduct PIA and prepare PIA report with recommendations to address any gap in the process

     - Coordinate results of PIA with process owners, COP and/or DPO

     - Monitor implementation of agreed resolutions to any gap noted during the PIA

8. Other tasks and projects that may be assigned