NON-DISCLOSURE AGREEMENT AND

PERSONAL DATA OBLIGATIONS

I, Mark Joseph Laher, a resident of, Abuyog, Leyte, a

________________________________ in the Department of
____________________________________, of the Vicente Sotto
Memorial Medical Center (VSMMC), is hereby legally bound, consents,
and accepts the following obligations, terms and conditions as set forth in
this Agreement, for the purpose of ensuring protection of personal data
being processed in VSMMC, in accordance with the Data Privacy Act and
related laws and regulations.

For purposes of this agreement, I understand that Protected

Information refers to:

1. Health information of patients, patient records, laboratory and or other

diagnostic results, financial information, patient photographs or videos,
and any other personal data pertaining to patients;
2. Information obtained in the course of communicating with patients or
their relatives and representatives, physicians, those providing other
health services, or while attending meetings in relation to my functions;
3. Information made known to me by virtue of my connection with VSMMC
and/or in my professional capacity;
4. Any other personal information, including those sensitive and privileged
information, that I may obtain or have access to, whether intentionally or
accidentally, in the course of my employment or engagement with
VSMMC.

I am obliged by law to adhere to data privacy principles, and to

maintain the confidentiality, integrity, and availability of personal data that I
have access to, or that I process as part of my duties. I understand that by
working in VSMMC, and having access to protected information, I am
obligated to comply with the following:

1. To strictly comply with all orders and guidelines issued in VSMMC

intended for privacy and data security, including policies and procedures
for data protection intended to protect against any accidental or unlawful
destruction, alteration and disclosure, as well as against any other
unlawful processing;
2. To be responsible for personal data I process and to exert reasonable
efforts to protect them from any harm, including accidental or unlawful
loss or destruction, unauthorized and unlawful access, modification,
interference or contamination, negligent handling and any other misuse
or misappropriation;

Page 1 of 3
VSMMC-OSM-DPO-F-01 Rev. 0
January 9, 2019
3. To hold and maintain the protected information in strictest confidence,
and to never disclose protected information, take photographs or any
other recording of patients nor make changes or modifications to
documents and records, unless under approved circumstances, in
accordance with law;
4. To never use protected information for my own benefit or to the
unwarranted detriment of VSMMC or its patients, such as providing
access, giving, selling, copying, disposing or permitting use by others,
bringing documents or copies of files containing protected information
outside the hospital without authority, or any form of tampering of
hospital records;
5. To keep my user account such as username and password secret, and to
only access information that I need in the performance of my assigned
tasks and duties;
6. To report to the physician or DPO any unauthorized use or disclosure,
loss, theft, misuse, misplacement of protected information, or any other
incident that could lead to a privacy violation or security breach in the
hospital, upon knowledge or reasonable belief of their occurrence,
whether or not I am personally involved;
7. To turn over all documents and files, whether paper-based or electronic,
which I have access or which are in my possession, to the VSMMC’s
responsible officer upon termination of contract or separation of service,
to the end that I will not have in my possession or control any of these
protected information, or any documentation or other records from
VSMMC; and
8. To know the importance of protecting personal data, and to commit in
my personal capacity to comply with the provisions of the Data Privacy
Act, and relevant laws and regulations.

I acknowledge that I will be accountable for my access and use of

protected information, including when I process the information unlawfully
or without authority. I have the obligation to maintain the confidentiality of
all protected information that comes into my knowledge even if I am no
longer connected with VSMMC. I will be solely responsible for any claims
from third parties if such claim results from my own fault or negligence, or
failure to abide by the privacy policies and procedures in VSMMC.

If any provision of this Agreement is held to be invalid or

unenforceable, all other provisions shall remain in full force and effect. I also
know and agree that my failure to fulfill any of the conditions set forth in
this Agreement and/or my violation of any terms of this Agreement shall
result in my being subject to appropriate disciplinary and/or legal actions
including termination of employment and claim for damages.

Page 2 of 3
VSMMC-OSM-DPO-F-01 Rev. 0
January 9, 2019
 IN WITNESS WHEREOF, I hereto set my hand this ___day of__, ___ in
the City of Cebu Philippines.

Mark Joseph Laher

Name and Signature

Witness:

_____________________

SUBSCRIBED AND SWORN to before me this ____day of

__________20____, in the City of Cebu, Philippines.

Doc. No. ________;

Page No. _______;
Book No. _______;
Series of 20____.

Page 3 of 3
VSMMC-OSM-DPO-F-01 Rev. 0
January 9, 2019