The Law Office provides legal assistance to our clients in the areas of data protection laws and regulation. In particular, the Law Office ensures our clients’ compliance with the Data Privacy Act, its implementing rules and regulations, and pertinent issuances and advisories of the National Privacy Commission.

• Data Protection Compliance
  • Ensuring adherence to the Data Privacy Act and related regulations
  • Conducting comprehensive data protection impact assessments and audits
  • Drafting and reviewing privacy policies, terms of service, and data processing agreements
• Data Breach Response
  • Assisting with data breach notification and response strategies
  • Advising on incident management and communication with affected parties
  • Representing clients in regulatory investigations and enforcement actions
• Regulatory Compliance and Representation
  • Advising on compliance with national and international data protection regulations
  • Assisting with registration and reporting obligations to data protection authorities
  • Representing clients in hearings, appeals, and negotiations with regulatory bodies
• Data Subject Rights Management
  • Advising on the implementation of procedures to handle data subject requests, including access, rectification, erasure, and portability
  • Ensuring timely and compliant responses to data subject requests
  • Training staff on data subject rights and internal processes
• Risk Management and Data Security
  • Evaluating data privacy risks and developing mitigation strategies
  • Assisting with the implementation of data security measures and best practices
  • Advising on cybersecurity policies and incident response plans
• Cross-Border Data Transfers
  • Advising on the legal requirements for international data transfers
  • Assisting with the implementation of appropriate safeguards, such as Standard Contractual Clauses and Binding Corporate Rules
  • Navigating the complexities of data transfer regulations in different jurisdictions
• Training and Awareness Programs
  • Providing tailored training sessions for staff on data protection principles and compliance
  • Developing awareness programs to promote a culture of data privacy within the organization
  • Offering ongoing support and updates on emerging data privacy issues and regulations