NPC Advisory 17-01: Designation of Data Protection Officers

Summary

NPC Advisory No. 17-01 sets the rules on the designation, qualifications and functions of the Data Protection Officer (DPO) that personal information controllers and processors must appoint under RA 10173. It defines the DPO's role in monitoring compliance, advising data subjects, and serving as the point of contact for the National Privacy Commission. Complaint guides cite this advisory to identify the correct counterparty when sending data-subject requests or breach notifications.