The University Data Protection Office (UDPO) is a unit under the Office of the President responsible for ensuring the compliance by the Ateneo de Manila University—including its various offices and personnel—with Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations (IRR), and other applicable privacy and data protection laws and policies, including issuances by the National Privacy Commission (NPC).

What We Do

We develop and implement policies and procedures designed to protect all personal data under the control or custody of the University after going through the institution’s standard approval process. In line with this, we perform the following specific functions:

• Monitor the University’s compliance with all applicable data protection laws and policies;
• Give advice to the University’s various units, centers, offices, and personnel regarding complaints and/or the exercise by data subjects of their rights under the DPA;
• Conduct Privacy Impact Assessments relative to activities, measures, projects, programs, or systems of the University and its different units, centers, and offices;
• Ensure proper management of security incidents including data breaches, that involve personal data under the control or custody of the University. We also prepare and submit to the NPC any or all required reports and documentation;
• Inform and cultivate awareness on privacy and data protection in the University;
• Serve as the contact person of the University vis-a-vis data subjects, the NPC, and other concerned parties, in all matters concerning privacy and data protection;
• Cooperate and coordinate with the NPC and other government agencies regarding matters concerning privacy and data protection.

Our Team

Jam Jacob
Director

Jam is a recognised authority in data protection. An IAPP Fellow of Information Privacy (CIPP/E, CIPM, FIP), and a Certified Senior Lead Implementer of ISO 27701, he has more than 12 years of experience in the field and 15 years of practicing law. Outside of the University, he is Policy and Legal Advisor to the Foundation for Media Alternatives, a civil society organisation advocating for human rights online. He is also a data protection consultant, primarily as head of the advisory and research firm, the LIGHTS Institute. Jam has been actively involved in the crafting of many data protection policies in the Philippines, such as the implementing rules of the Data Privacy Act of 2012. Today, he continues to work with global leaders in privacy rights advocacy, such as Privacy International, Association for Progressive Communications, and the University of Toronto’s Citizen Lab. He also sits as a member of the Data Privacy Council for the Education Sector. He is a regular resource person at various forums and to news organisations, both domestic and foreign. He has degrees in Sociology and Law from the University of the Philippines. He also obtained a postgraduate degree (with First Class Honours) in Human Rights Law from the University of Auckland, as a 2014 New Zealand ASEAN Scholar Awards recipient. He has also taken up the Summer Course on US-EU Privacy Law and Policy at the University of Amsterdam.

Shari Datu Tambuyung
Assistant Director

Shari is a Certified Information Privacy Manager, a Certified Lead Implementer of Privacy Information Management Systems and an alumna of the Asia Pacific School on Internet Governance. She worked as a former Development
Management Officer of the National Privacy Commission, serving under its Policy Development Division, and as overall sectoral champion for the retail industry. She has attended various activities taking up human rights issues, with many focusing on privacy rights and other civil liberties. She has also organized
and conducted orientations sessions relating to privacy and data protection. Shari completed her undergraduate studies at Miriam College, where she earned a degree in Business Administration.