Per RA 10173 + NPC Circular 16-01 + Privacy Manual: governance + accountability. Requirements include (a) Mandatory Designation of Data Protection Officer (DPO) per NPC Circular 16-01 with defined responsibilities + (b) Registration of Data Processing Systems with NPC per NPC Circular 17-01 + (c) maintain Privacy Management Program and Manual per IRR Section 26 documenting roles + processes + controls + (d) maintain Data Retention and Disposal per IRR Section 37 + (e) deliver Employee Privacy Training including role-based content + (f) maintain governance + accountability framework demonstrating compliance.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.