Data Protection Officer

• Lead the hospital’s data privacy and governance program, ensuring compliance with Philippine Data Privacy Act (R.A. 10173) and NPC regulations.
• Protect Patient Health Information (PHI) and sensitive corporate data across clinical and business operations.
• Conduct Privacy Impact Assessments (PIAs) for EHR, laboratory, diagnostics, and other healthcare technologies.
• Review and manage Data Sharing Agreements, outsourcing agreements, and third-party vendor privacy compliance.
• Lead data breach investigations and response, including required NPC notifications.
• Oversee patient privacy rights involving medical record correction, access, transfer, and portability.
• Supervise departmental Compliance Officers for Privacy (COPs) and conduct internal privacy audits.
• Develop and deliver privacy training and awareness programs for employees, residents, and medical consultants.
• Support EHR innovation, digital healthcare initiatives, and cross-border telemedicine partnerships.

Key Qualifications

• Bachelor’s degree in IT, Information Security, Nursing Informatics, Healthcare Administration, Law, or related field; advanced degree preferred.
• Mandatory Certified Data Protection Officer (CDPO) certification.
• CIPP/E, CISM, CISSP, or similar certifications are advantageous.
• Strong knowledge of Philippine privacy law, healthcare privacy, cybersecurity, and emerging threats.
• Excellent executive communication, stakeholder management, conflict resolution, and diplomacy skills.

Pay: From Php25,000.00 per month

Work Location: In person