SHC Data Breach Response (DBR) Team

1. Data Breach Response Team

The SHC Data Breach Response (DBR) Team, in some cases referred to as the “Breach Management and Response Team”, is a team created for the purpose of ensuring immediate action in the event of a security incident or personal data breach involving stakeholders of Sacred Heart College of Lucena City, Inc. (pgs. 30 and 109 of the Manual for Data Privacy)

Upon identification of a security incident or personal data breach, the Team must first conduct an initial assessment in order to determine the nature and extent of such. It shall then execute measures to mitigate the adverse effects of the security incident or personal data breach.

The Team is composed of members who have clearly defined responsibilities to ensure timely action in the event of a security incident or personal data breach.

SHC Data Breach Response (DBR) Team

2. COMPOSITION OF THE DBR TEAM

The first DBR Team of Sacred Heart College of Lucena City, Inc. created for the above purpose is composed of the following members, following the guidelines recommended by the National Privacy Commission (NPC):

2.1 DPOYvonne Hitty Mier

The DBR Team is headed by the school’s Data Protection Officer (DPO) who is responsible for validating that any actions taken are aligned with the established policies and procedures and existing laws and regulations, particularly on data privacy.

Ms. Mier has been appointed the school’s DPO since AY 2020-2021. She is currently serving her second year as DPO and has attended seminars, training and conferences related to data privacy and data protection.

2.2 PR Earl Gicana

The school’s predetermined point of contact with the media, the public relations (PR) expert, is trained on developing precise and impactful press releases. In case of a security incident or data breach of public interest, the PR shall be updating the media about the work of the DBR Team and any remedial action taken. The PR role is to balance the need to protect the school’s institutional interests (ex. its reputation) with the need to inform the public.

As the school’s Promotion and Public Relations Officer, Mr. Gicana is familiar with the institution’s policies and information disclosure procedures. The PR expert will advise on and help manage the public response to a security incident or data breach.

2.3 Security Arnel Cadeliña

The security representative for the DBR Team is the school’s Health and Safety Officer. Mr. Cadeliña has held the aforementioned post for two consecutive years from AY 2020-2021 up to the present. He has also been appointed as the school’s Pollution Control Officer for AY 2021-2022. He is well versed in health and safety and security rules and regulations issued by the national, regional and local government units.    

The security representative is responsible for all physical-related security incidents including the:

i.    Diagnosis of the cause of the incident;

ii.   Determination of solution required to restore service;

iii. Resolution of security incidents; and

iv. Escalation of unresolved security incidents to the appropriate person or level.

2.4 Technical/IT Billie Tolentino

The IT representative is responsible for all IT-related security incidents including the:

i.    Diagnosis of the cause of the incident;

ii.   Determination of solution required to restore service;

iii. Resolution of security incidents; and

iv. Escalation of unresolved security incidents to the appropriate person or level.

Mr. Tolentino is the school’s Institutional Coordinator, Information Technology and Online Services/Facility Coordinator. He has decades of experience in the MIS/IT field and is familiar with data privacy issues and concerns. As IT expert, he is also up-to-date with current IT trends, challenges and issues that have bearing on data privacy of data subjects.

2.5 Human ResourceSylvia Ingente

Regarding human resource, the DBR Team is represented by the school’s HR Director, Ms. Ingente. As HR Director, she is responsible for imposing disciplinary action to be taken and/or made to the personnel involved in security incident or data breach.

Ms. Ingente has served as the school’s HR Director since AY 2020-2021 up to the present. She is familiar with labor laws and regulations, such as the Labor Code of the Philippines, and is well aware of the school’s organizational policies and procedures.

 2.6 LegalAtty. Eduardo Lizares

The legal representative of the DBR Team, Atty. Lizares, has been legally representing the DC-SLMES and providing legal services, advice and consultation for its member schools for many years.

As legal representative of the Team, Atty. Lizares is responsible for providing legal advice on the management of the security incidents reported.