Inquiry, Complaints and Breach Management

i.                    Inquiry on Data Privacy issues

Data subjects may inquire or request information from the Data Privacy Response Team, regarding any matter relating to the processing of their personal data under the custody of L-NU, including the data privacy and security policies implemented to ensure the protection of their personal data.

ii.                  Procedure for Complaints and Breach Management

Any suspected or actual breach of the L-NU Data privacy policy, violation of data privacy rights, or any breach, loss or unauthorized access or disclosure of personal information in the possession or under the custody of the University must be reported immediately to the any member of the Data Privacy Response Team.

In case of a complaint for violation of the L-NU Data Privacy Policies as contained in the provisions of this Manual, or any serious breach, loss or unauthorized access, disclosure or destruction of personal information in the possession or under the custody of the University and within reasonable time, the DPO or any (2) members of the Privacy Team shall conduct a verification of the allegations in the complaint, and if warranted, and an official investigation in cases of serious security breach as provided under Republic Act No. 10173 or the Data Privacy Act of 2012 and its Implementing Rules and Regulations Act, and shall report the same to the National Privacy Commission within seventy-two (72) hours from knowledge thereof, and in cases of breach of personal data, the DPO shall initiate the breach management procedure as provided in the policies of the University which includes conducting an investigation on the matter, risk assessment, containment, recovery and recommendation on permanent corrective measures

The DPO may also convene the entire team in case of a complaint, or motu-propio in case the violation of policies or data breach, loss, unauthorized access or destruction as an investigation committee to recommend actions, particularly when the violation is serious or causes or has the potential to cause material damage to the University or any of its students or employees. Such recommendation shall be submitted to the President of the University for approval. Any appeal on such approved recommendation/Decision shall be made by any of the affected parties within 15 days from receipt of the approved Decision.

Data Breach Reporting:

Data Protection Officer: Zachary G. Javelona

Email: dpo@lyceum.edu.ph qao@lyceum.edu.ph

Address:

Quality Assurance & Data Protection Office 

2nd Floor, Admin Building, Lyceum-Northwestern University 

Tapuac Road, Tapuac District, Dagupan City, Pangasinan 2400