MANUEL S.
ENVERGA UNIVERSITY FOUNDATION
COLLEGE OF COMPUTING AND MULTIMEDIA STUDIES
CHED CENTER OF DEVELOPMENT IN IT EDUCATION
Living in IT Era
Lesson 4
The Data Privacy Act of 2012 is a Philippine law that aims to protect the
privacy and security of personal information in both the public and
private sectors. It governs the collection, processing, and use of personal
data while promoting responsible data handling practices.
MANUEL S. ENVERGA UNIVERSITY FOUNDATION
COLLEGE OF COMPUTING AND MULTIMEDIA STUDIES
CHED CENTER OF DEVELOPMENT IN IT EDUCATION
Data Subject Rights
The law grants individual certain rights over their personal data,
including the right to be informed, access, correct, object, and have their
data erased or blocked.
MANUEL S. ENVERGA UNIVERSITY FOUNDATION
COLLEGE OF COMPUTING AND MULTIMEDIA STUDIES
CHED CENTER OF DEVELOPMENT IN IT EDUCATION
MANUEL S. ENVERGA UNIVERSITY FOUNDATION
COLLEGE OF COMPUTING AND MULTIMEDIA STUDIES
CHED CENTER OF DEVELOPMENT IN IT EDUCATION
Data Subject Rights
If a Filipino individual signs up for an online shopping website, they have the right
to access their account information, correct their address if it's wrong, and opt-out of
receiving promotional emails.
Consent
Organizations must obtain informed and explicit consent from
individuals before collecting and processing their personal data.
Consent should be freely given and specific.
MANUEL S. ENVERGA UNIVERSITY FOUNDATION
COLLEGE OF COMPUTING AND MULTIMEDIA STUDIES
CHED CENTER OF DEVELOPMENT IN IT EDUCATION
MANUEL S. ENVERGA UNIVERSITY FOUNDATION
COLLEGE OF COMPUTING AND MULTIMEDIA STUDIES
CHED CENTER OF DEVELOPMENT IN IT EDUCATION
Consent
A healthcare provider in the Philippines must obtain the patient's consent to collect,
process, and share their medical records with other healthcare professionals
involved in their care.
Data Security Measures
The law requires organizations to implement security measures to
protect personal data from data breaches and unauthorized access. Data
breaches must be reported to the NPC and affected data subjects.
MANUEL S. ENVERGA UNIVERSITY FOUNDATION
COLLEGE OF COMPUTING AND MULTIMEDIA STUDIES
CHED CENTER OF DEVELOPMENT IN IT EDUCATION
MANUEL S. ENVERGA UNIVERSITY FOUNDATION
COLLEGE OF COMPUTING AND MULTIMEDIA STUDIES
CHED CENTER OF DEVELOPMENT IN IT EDUCATION
Data Security Measures
A Philippine bank must implement encryption and access controls to safeguard
customer account information. If a data breach occurs, they must promptly report it
to the NPC and inform affected customers.
Cross-Border Data Transfers
Regulations are in place to govern the transfer of personal data outside
the Philippines to ensure adequate protection.
MANUEL S. ENVERGA UNIVERSITY FOUNDATION
COLLEGE OF COMPUTING AND MULTIMEDIA STUDIES
CHED CENTER OF DEVELOPMENT IN IT EDUCATION
MANUEL S. ENVERGA UNIVERSITY FOUNDATION
COLLEGE OF COMPUTING AND MULTIMEDIA STUDIES
CHED CENTER OF DEVELOPMENT IN IT EDUCATION
Cross-Border Data Transfers
A Philippine e-commerce company that stores customer data on servers located
abroad must comply with the law's requirements for secure international data
transfers.
Registration
Certain data processing systems involving personal data need to be
registered with the NPC, subject to exemptions.
MANUEL S. ENVERGA UNIVERSITY FOUNDATION
COLLEGE OF COMPUTING AND MULTIMEDIA STUDIES
CHED CENTER OF DEVELOPMENT IN IT EDUCATION
MANUEL S. ENVERGA UNIVERSITY FOUNDATION
COLLEGE OF COMPUTING AND MULTIMEDIA STUDIES
CHED CENTER OF DEVELOPMENT IN IT EDUCATION
Registration
A Philippine government agency that manages citizen records must register its data
processing system with the NPC to ensure it complies with data privacy regulations.
Data Privacy Commission (DPC)
The National Privacy Commission (NPC) is established as the
regulatory authority responsible for enforcing the Data Privacy Act and
ensuring compliance.
DPOs are responsible for managing data privacy programs, conducting
risk assessments, providing data protection advice, and serving as a
point of contact for data subjects and regulatory authorities.
MANUEL S. ENVERGA UNIVERSITY FOUNDATION
COLLEGE OF COMPUTING AND MULTIMEDIA STUDIES
CHED CENTER OF DEVELOPMENT IN IT EDUCATION
MANUEL S. ENVERGA UNIVERSITY FOUNDATION
COLLEGE OF COMPUTING AND MULTIMEDIA STUDIES
CHED CENTER OF DEVELOPMENT IN IT EDUCATION
DPC
he Data Privacy Commission is a government regulatory body with authority over
all organizations that process personal data in the Philippines. It has the power to
investigate, penalize, and enforce data privacy laws at a national level.
Data Protection Officers (DPOs)
Organizations handling personal data must appoint Data Protection
Officers to oversee data privacy compliance within their organizations.
The DPC's primary role is to regulate and enforce data privacy laws and
regulations in the country. It is responsible for investigating complaints,
monitoring compliance, imposing penalties for violations, and providing
guidance on data privacy matters.
MANUEL S. ENVERGA UNIVERSITY FOUNDATION
COLLEGE OF COMPUTING AND MULTIMEDIA STUDIES
CHED CENTER OF DEVELOPMENT IN IT EDUCATION
MANUEL S. ENVERGA UNIVERSITY FOUNDATION
COLLEGE OF COMPUTING AND MULTIMEDIA STUDIES
CHED CENTER OF DEVELOPMENT IN IT EDUCATION
DPO
DPOs have authority within the organization that appoints them. They do not have
regulatory authority over other organizations but ensure that their own organization
complies with data protection laws.
Penalties
Violations of the Data Privacy Act can result in fines, imprisonment, or
both, depending on the severity of the violation.
MANUEL S. ENVERGA UNIVERSITY FOUNDATION
COLLEGE OF COMPUTING AND MULTIMEDIA STUDIES
CHED CENTER OF DEVELOPMENT IN IT EDUCATION
The Data Privacy Act of 2012
The Data Privacy Act of 2012 is essential in the digital age to
safeguard individuals' privacy and personal information. It aligns the
Philippines with international data protection standards, ensuring
responsible data handling while giving individuals control over their
data.
MANUEL S. ENVERGA UNIVERSITY FOUNDATION
COLLEGE OF COMPUTING AND MULTIMEDIA STUDIES
CHED CENTER OF DEVELOPMENT IN IT EDUCATION
