1.
Align our Organization
1.1. The Provincial Government shall
(a) designate Provincial Privacy Administrator (PPA),
(b) establish Provincial. Data Breach Response Team and designate members
Organiza- thereto,
tion (c) designate Office Heads of PGL as Office Privacy Administrator (OPA) of their
respective office;
1.2. Each Office Head shall
(a) designate Assistant Office Privacy Administrator (AOPA) for their office;
(b) establish their Office Data Breach Response Team and appoint members
thereto, and
(c) designate a System Privacy Administrator for each of the Personal Data
Processing System of their office.
(Privacy Organizational Structure)
Provincial Government of Laguna
Provl. Privacy Administrator (PPA)
Central Data Breach Response Team
PGL Office PGL Office PGL Office PGL Office PGL Office
Office Privacy Administrator (OPA)
Asst. Office Privacy Administrator
Office Data Breach Response Team
Office Data Office Data Office Data Office Data Office Data
Processing Processing System Processing System Processing System Processing System
SPA (System Privacy Administrator) SPA SPA SPA
2. Enlighten our Employees
2.1 The Management Information System Office shall be required to hold series of
(a) Data Privacy Enlightenment Seminars for all employees,
(b) Seminar-Workshops on Privacy Compliance Plan Preparation for OPA &
AOPA,
Enlighten-
(c) Seminar-Workshops on Privacy Impact Assessments for OPA & AOPA, and
ment (d) Seminar-Workshop on Privacy Manual Preparation for OPA & AOPA,
2.2. All Office Heads shall be required to ensure their attendance and their respective
employees’ attendance on seminars and workshops;
2.3 All Office Privacy Administrators shall be required to conduct regular workshops
for their System Privacy Administrators, Data Breach Drills for their Office Data
Breach Response Team, and Orientation-Seminars for their employees involved
in personal data processing.
3. Write Down our Compliance & Policy Documents
Each office shall:
3.1 submit inventory of Data Processing Systems of their office,
3.2 make an Office Compliance Plan,
3.3 conduct Privacy Impact Assessment for each of their processing system,
Policy 3.4 create System Privacy Manual for each of their Data Processing System,
3.5 consolidate their System Privacy Manuals into Office Privacy Manual;
3.6 The Provincial Privacy Administrator shall consolidate the Office Privacy Manuals
into Provincial Privacy Manual, and
3.7 create the Provincial Privacy Management Program;
4. Register our Processing Systems
4.1. In collaboration with our Provincial Data Protection Officer, each Office shall register
all their applicable Personal Data Processing Systems to the National Privacy
Commission’s Registry of Data Processing System.
Registra-
tion
5. Institutionalize our Policy
All Office Heads shall be required to institutionalize their Privacy Policy by:
5.1 including in their office ISO Procedures the related processes that shall be created
in their Office Privacy Manual,
Institutio- 5.2 including in their office Citizen’s Charter the related frontline services that shall be
nalization created in their Office Privacy Manual,
5.3 including in their Office Performance Commitment Review (OPCR) system the
related tasks necessary for the implementation of (1) – (5).
