Philippines

R.A. 10173
National Privacy Commission

UK
Data Protection Act
Information Commissioners Office

Consent of Data

Subject Access Requests

General Data Privacy Principles

Fair Processing Notices

Security of Personal Information

Security Procedures

Rights of Data Subjects

Retention Periods

Principle of Accountability

The department, as the data

controller, retains responsibility
where personal data are passed to
another organization to be
processed. Departments will be
penalized for any breaches of the
data protection principles.

Requirements Relating to Access by

Agency Personnel to
Sensitive Personal Information

Subject Access Request

Under the said responisibilty

explains about LIMITATION TO
ONE THOUSAND (1000) Records.
Once a request has been approved,
the head of the agency limits the
access to not more than 1000 records
at a time.
This responsibility is unique for our
country because of the limiting of
personal information distributed as
opposed to other government
agencies that have more advanced
systems and have the benefit of vast
amounts of personal information on
subjects.

All data controllers have a statutory

obligation to respond to subject
access request usually within 40 days
of receipt. Individuals are entitled a
paying fee of 10.
In order to access the personal
information of a subject, a payment
of 10 is required which is brought to
the attention of the data controller.