Data Privacy Officer

Metropolitan Medical Center; Manila; On-site; PHP 900,000 - 2,000,000; Full time

Job summary

Metropolitan Medical Center seeks a Senior Privacy & Compliance Officer to lead the hospital’s data privacy and governance program, ensuring adherence to the Philippine Data Privacy Act and NPC regulations. The role focuses on protecting PHI across clinical and business operations and guiding privacy strategy.

The incumbent will conduct Privacy Impact Assessments for EHR and other healthcare technologies, manage third-party privacy risk, and lead data breach investigations with NPC

Qualifications

• Bachelor’s degree in IT, Information Security, Nursing Informatics, Healthcare Administration, or related field.
• Mandatory CDPO certification.
• Strong knowledge of Philippine privacy law and healthcare privacy.
• Excellent executive communication and stakeholder management.

Responsibilities

• Lead the hospital’s data privacy and governance program and ensure compliance with PH Data Privacy Act and NPC regulations.
• Protect PHI and sensitive data across clinical and business operations.
• Conduct Privacy Impact Assessments for EHR, lab, diagnostics, and healthcare technologies.
• Review Data Sharing and outsourcing agreements for privacy compliance.
• Lead data breach investigations and NPC notifications.
• Oversee patient privacy rights and medical record privacy processes.
• Supervise COPs and conduct internal privacy audits.
• Develop and deliver privacy training for employees and clinicians.
• Support EHR innovation and cross-border telemedicine initiatives.

Skills

Privacy governance

Stakeholder management

Executive communication

Diplomacy

Education

Bachelor’s degree in IT/Information Security/Healthcare Administration/Law

Advanced degree preferred

Tools

CDPO Certification

CIPP/E

CISM

CISSP

Job description

• Lead the hospital’s data privacy and governance program, ensuring compliance with Philippine Data Privacy Act (R.A. 10173) and NPC regulations.


• Protect Patient Health Information (PHI) and sensitive corporate data across clinical and business operations.


• Conduct Privacy Impact Assessments (PIAs) for EHR, laboratory, diagnostics, and other healthcare technologies.


• Review and manage Data Sharing Agreements, outsourcing agreements, and third-party vendor privacy compliance.


• Lead data breach investigations and response, including required NPC notifications.


• Oversee patient privacy rights involving medical record correction, access, transfer, and portability.


• Supervise departmental Compliance Officers for Privacy (COPs) and conduct internal privacy audits.


• Develop and deliver privacy training and awareness programs for employees, residents, and medical consultants.


• Support EHR innovation, digital healthcare initiatives, and cross-border telemedicine partnerships.

Qualifications

• Bachelor’s degree in IT, Information Security, Nursing Informatics, Healthcare Administration, Law, or related field; advanced degree preferred.


• Mandatory Certified Data Protection Officer (CDPO) certification.


• CIPP/E, CISM, CISSP, or similar certifications are advantageous.


• Strong knowledge of Philippine privacy law, healthcare privacy, cybersecurity, and emerging threats.


• Excellent executive communication, stakeholder management, conflict resolution, and diplomacy skills.