��������Ƶ

1. Cross-border Data Transfers: Required when personal data will be transferred outside the Philippines, specifying compliance with cross-border transfer requirements

2. Sub-processors: Include when the data processor may engage sub-processors, specifying requirements for approval and obligations

3. Industry-Specific Requirements: Additional provisions for specific sectors like healthcare, banking, or telecommunications

4. Data Protection Impact Assessment: Include when processing activities require DPIA under Philippine law

5. Insurance Requirements: Specific insurance obligations for data protection risks

6. Force Majeure: Provisions for handling data protection obligations during extraordinary circumstances

1. Schedule 1 - Processing Activities: Detailed description of authorized processing activities, categories of data subjects, and types of personal data

2. Schedule 2 - Technical and Organizational Measures: Specific security measures and controls implemented to protect personal data

3. Schedule 3 - Authorized Sub-processors: List of approved sub-processors and their processing activities, if applicable

4. Schedule 4 - Data Transfer Mechanisms: Details of mechanisms used for international data transfers, if applicable

5. Schedule 5 - Contact Points: List of key contacts for data protection matters, including Data Protection Officers

6. Appendix A - Security Breach Response Plan: Detailed procedures for handling and reporting data breaches

7. Appendix B - Audit Requirements: Specific procedures and requirements for compliance audits