The Data Protection Office (DPO) is responsible for ensuring compliance by LPU-Batangas—including its various offices and personnel—with Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations (IRR), and other applicable privacy and data protection laws and policies, including issuances by the National Privacy Commission (NPC).

We develop and implement policies and procedures designed to protect all personal data under the control or custody of the university after going through the institution’s standard approval process. In line with this, we perform the following specific functions:

• Monitor the university’s compliance with all applicable data protection laws and policies;
• Give advice to the university’s various units, centers, offices, and personnel regarding complaints and/or the exercise by data subjects of their rights under the DPA;
• Conduct Privacy Impact Assessments relative to activities, measures, projects, programs, or systems of the university and its different units, centers, and offices;
• Ensure proper management of security incidents, including data breaches, that involve personal data under the control or custody of the university. We also prepare and submit to the NPC any or all required reports and documentation;
• Inform and cultivate awareness on privacy and data protection in the university;
• Serve as the contact person of the university vis-à-vis data subjects, the NPC, and other concerned parties in all matters concerning privacy and data protection;
• Cooperate and coordinate with the NPC and other government agencies regarding matters concerning privacy and data protection.