Scribd Logo
Upload

Welcome to Scribd!

  • 20 views

    Group 6: August 30, 2019: Who Stores Data About You?

    Uploaded by

    dc contayoso
    The document summarizes key aspects of the Data Privacy Act of 2012 in the Philippines. It defines important terms like data subjects and personal information controllers. It outlines the rights of data subjects, including rights to access, correct, and object to personal data processing. It discusses principles of transparency and legitimate purpose. It also lists the five pillars of compliance and security measures organizations should implement to protect personal data.

    Copyright:

    © All Rights Reserved
    Download as DOCX, PDF, TXT or read online from Scribd

    Group 6: August 30, 2019: Who Stores Data About You?

    Uploaded by

    dc contayoso
    20 views5 pages
    The document summarizes key aspects of the Data Privacy Act of 2012 in the Philippines. It defines important terms like data subjects and personal information controllers. It outlines the rights of data subjects, including rights to access, correct, and object to personal data processing. It discusses principles of transparency and legitimate purpose. It also lists the five pillars of compliance and security measures organizations should implement to protect personal data.

    Original Title

    G6_RA 10173

    Copyright

    © © All Rights Reserved

    Available Formats

    DOCX, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    The document summarizes key aspects of the Data Privacy Act of 2012 in the Philippines. It defines important terms like data subjects and personal information controllers. It outlines the rights of data subjects, including rights to access, correct, and object to personal data processing. It discusses principles of transparency and legitimate purpose. It also lists the five pillars of compliance and security measures organizations should implement to protect personal data.

    Copyright:

    © All Rights Reserved
    Download as DOCX, PDF, TXT or read online from Scribd
    Download as docx, pdf, or txt
    20 views5 pages

    Group 6: August 30, 2019: Who Stores Data About You?

    Uploaded by

    dc contayoso
    The document summarizes key aspects of the Data Privacy Act of 2012 in the Philippines. It defines important terms like data subjects and personal information controllers. It outlines the rights of data subjects, including rights to access, correct, and object to personal data processing. It discusses principles of transparency and legitimate purpose. It also lists the five pillars of compliance and security measures organizations should implement to protect personal data.

    Copyright:

    © All Rights Reserved
    Download as DOCX, PDF, TXT or read online from Scribd
    Download as docx, pdf, or txt
    of 5

    Group 6:

    August 30, 2019

    RA 10173 (DATA PRIVACY ACT OF 2012)


    Who stores data about you?

    Which is more valuable?

    “Data is more
    valuable than Money.
    If someone takes
    your money, that's
    all they have. If you
    let someone take
    your data, they may eventually take your money too! “
    - Deputy Privacy Commissioner Dondi Mapa

    Republic Act 10173, the Data Privacy Act of 2012


    An act protecting individual personal information in information and communications
    systems in the government and the private sector, creating for this purpose a national privacy
    commission, and for other purposes

    Key roles in the Data Privacy Act


    Data Subjects
    Refers to an individual whose, sensitive personal, or privileged information is processed
    personal
    Personal Information Controller (PIC)
    Controls the processing of personal data, or instructs another to process personal data on
    its behalf.
    Personal Information Processor (PIP)
    Organization or individual whom a personal information controller may outsource or
    instruct the processing of personal data pertaining to a data subject
    Data Protection Officer (DPO)
    Responsible for the overall management of compliance to DPA
    National Privacy Commission
    Independent body mandated to administer and implement the DPA of 2012, and to
    monitor and ensure compliance of the country with international standards set for personal data
    protection
    Rights of the Data Subject
     Right to be informed - IRR, Section 34.a
     Right to object - IRR, Section 34.b
     Right to access - IRR, Section 34.c
     Right to data portability - IRR, Section 36
     Right to correct (rectification) - IRR, Section 34.d
     Right to erasure or blocking - IRR, Section 34.e
     Right to file a complaint - IRR, Section 34.a.2
     Right to damages - IRR, Section 34.f
     Transmissibility of Rights - IRR, Section 35
    Principle of Transparency
    A data subject must be aware of the nature, purpose, and extent of the processing of his
    or her personal data, including the risks and safeguards involved, the identity of personal
    information controller, his or her rights as a data subject, and how these can be exercised. Any
    information and communication relating to the processing of personal data should be easy to
    access and understand, using clear and plain language.
    Principle of Legitimate Purpose
    The processing of information shall be compatible with a declared and specified purpose,
    which must not be contrary to law, morals, or public policy.
    Five pillars of compliance

    Personal data shall be:


    1. processed fairly and lawfully
    2. processed only for specified, lawful and compatible purposes
    3. adequate, relevant and not excessive
    4. accurate and up to date
    5. kept for no longer than necessary
    6. processed in accordance with the rights of data subjects
    7. kept secure
    8. Shared to other PICs only if there is a DSA.
    Other Security Measures
     Shredding all confidential waste.
     Using strong passwords.
     Installing a firewall and virus checker on your computers.
     Encrypting any personal information held electronically.
     Disabling any ‘auto-complete’ settings.
     Holding telephone calls in private areas.
     Checking the security of storage systems.
     Keeping devices under lock and key when not in use.
     Not leaving papers and devices lying around.

    References:s
    [email protected]

    You might also like