PRIVACY NOTICE

PNP RSS DATA PRIVACY POLICY

Privacy Statement
The PNP Recruitment and Selection Service (PRSS), is the main office to implement
the PNP Recruitment and Selection program to ensure the entry of qualified and
competent uniformed personnel in the PNP.
It is our goal to demonstrate our commitment to fully protect your personal data privacy
in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of
2012 (DPA). We are aware that personal data comprises one’s identity and in this
modern times, personal and sensitive information’s confidentiality is of utmost
importance.
Please note that the terms “personal data” and “information” are used interchangeably.
When we talk about “personal data,” the term includes the concepts of personal
information, sensitive personal information, and privileged information. The first two are
typically used to distinctively identify you. For their exact definitions, you may refer to
the DPA.
In all instances, we assure you that processing your personal data will strictly follow the
provisions of DPA, especially the general data privacy principles of Transparency,
Legitimate Purpose, and Proportionality.

Utilization of PNP RSS Facebook Page for Announcements Only While, Google
Forms in the Inventory of Eligible Applicants.
Our official Facebook page is the “PNP Recruitment and Selection Service – PNP RSS”.
This Privacy Notice is applicable for both the PNP RSS Facebook page and Google
Forms. On the other hand, only the Google Forms functionality will enable the PNP RSS
to establish a pool of eligible applicants.
By using this page, you agree to the terms of this privacy policy. We may be updating
this policy from time to time. We encourage users to frequently check back on this page.
Should you be required to provide personal information, we only collect data after
obtaining your consent otherwise we will not proceed. In the event you agree to share
your personal information, we use google forms to collect names, age bracket,
cellphone number, gender, course, and eligibility qualifications. Hence, the PNP RSS
collects information in a transparent way and only with the full cooperation, knowledge,
and consent of interested parties.
Rest assured the use of Google Forms does offer a robust set of security features to
protect the data you collect. The encryption, access control, and two-factor
authentication mechanisms, among others, contribute to making Google Forms a safe
tool for data collection and sharing plus the strict vigilance of our personnel and
additional security measures are in place.

Basis, Use, and Purpose for Processing Personal Data

PNP RSS processes and collects personal information for purposes connected with its
legal mandate by the virtue of NHQ-PNP General Orders No. DPL-19-04 dated
December 27, 2019 providing the activation of the PNP Recruitment and Selection
Service as further confirmed by NAPOLCOM Resolution No. 2019-1030 dated
December 27, 2019. In this regard, data collected by the PNP RSS may be collected
and processed in connection with any of the following purposes:
1. To establish a pool of eligible applicants for Patrolman/Patrolwoman, Cadets of the
Philippine National Police Academy (PNPA), and Lateral Entry Program for Line and
Technical Officers.
2. To provide applicants with the appropriate updates and advisories in an appropriate
format and orderly and timely manner for the recruitment and selection process.
3. To comply with a legal obligation to which the PNP RSS is subject.
4. To be able to provide the appropriate action that a data subject may require
concerning their data privacy rights.
Moreover, we may collect other personal data that are relevant and necessary to
perform our mandate of providing compliance support and data subject assistance.

Disclosure of Personal Data

Personal data processed by the PNP RSS is not shared with any other party unless
such disclosure is allowed under Section 12 or 13 of the DPA.

Risks Involved
Risk refers to the potential of an incident to result in harm or danger to a data subject or
organization. Risks may lead to the unauthorized collection, use, disclosure, or access
to personal data. It includes risks involving the confidentiality, integrity, and availability of
personal data or the risk that processing will violate the general data privacy principles
and the rights of data subjects.
The PNP RSS ensures that adequate physical, technical, and organizational security
measures are in place to protect personal information's confidentiality, integrity, and
availability. However, this does not guarantee absolute protection against certain risks
involving the processing of personal data, such as when systems are exposed to
targeted cyberattacks, malware, ransomware, and computer viruses or when manual
records are accessed without authority.
However, adequate policies are in place to ensure appropriate security incident
management in line with existing NPC policies, circulars, and other issuances.

Data Protection and Security Measures

We safeguard the confidentiality, integrity, and availability of your personal information
by maintaining a combination of organizational, physical, and technical security
measures based on generally accepted data privacy and information security standards.
Among the measures we implement are the following:
a. Policies on access control in both digital and physical infrastructures to prevent
unauthorized access to personal information.
b. Acceptable use policies
c. End-to-end encryption and data classification whenever suitable.
d. Security measures against natural disasters, power disturbances, external
access, and similar threats.
e. Technical measures to protect our computers and databases against accidental,
unlawful, or unauthorized usage, interference, or access.
These steps of protection shall aim to maintain the availability, integrity, and
confidentiality of personal data against accidental or unlawful destruction, alteration, and
disclosure as well as unlawful processing.
Your personal data will only be accessed by our authorized personnel/ personal data
processor who hold such information under strict confidentiality. We shall restrict
access to information to anyone who wants to obtain such data without justifiable
reason, of course subject to the process the PNP Freedom of Information Manual
provides.
Any incident of security breach about said personal data which comes to our knowledge
will immediately be acted upon as the law mandated. PNP RSS will take the necessary
steps to address said breach and mitigate its negative effects. If there is a strong belief
that an incident affects your personal data, PNP RSS will notify you of such incident in
an appropriate manner.

Storage, Retention and Disposal of Data

We shall ensure that proper measures are adopted to protect your information. The
PNP RSS retains personal data strictly in accordance with operational needs and in
compliance with legal and regulatory purposes. Personal data shall be stored in a
database for one (1) year after inquiries and requests are acted upon. After which,
records shall be disposed of securely. Other categories of data may be kept longer than
one (1) year when its retention period is determined by other relevant laws and
regulations. However, the PNP RSS reserves the right to retain the data subject’s
personal data when necessary to establish, exercise or defend legal claims, or for
legitimate business purposes, or when provided for by law.
Physical records shall be disposed of through shredding, while digital files shall be
anonymized. In all instances, our manner of disposal shall ensure that the personal
information shall no longer be retrieved, processed, or accessed by unauthorized
persons. The PNP RSS’s data retention and disposal policy is in compliance with
Republic Act No. 9470, otherwise known as the National Archives of the Philippines Act.

Access to Information
Your personal information is accessed and used by the PNP RSS who have legitimate
interest in it for the purpose of carrying out our mandated duties for the PNP. We use
and share your information as permitted or required by law and NPC circulars.

Rights of a Data Subject

Under the DPA, you have the right to be informed regarding processing the personal
information we hold about you.
Further, you may be entitled to request:
a. Access to personal data we process about you. It is your right to obtain
confirmation on whether or not data relating to you are being processed;
b. Rectification of your personal data. This is your right to have your personal data
corrected if it is inaccurate or incomplete;
c. Erasure or order blocking of your personal data whenever warranted;
 d. The right to object if the personal data processing involved is based on consent
or on legitimate interest;
e. The right to data portability through which you may obtain and electronically
move, copy, or transfer your data securely for further use.
You may claim compensation if you believe you suffered damages due to inaccurate,
incomplete, outdated, false, unlawfully obtained, or unauthorized use of personal data
or for violating your rights and freedoms as a data subject.
Suppose you think that your personal information has been misused, maliciously
disclosed, or improperly disposed of or that your data privacy rights have been violated.
In that case, you have a right to file a complaint with the NPC.

Confidentiality
PNP RSS personnel shall operate and hold personal data under strict confidentiality.

Right to Privacy
As provided by the Act, you may object to the processing of your personal data, request
to access your personal information, and/or have it corrected, erased, or blocked on
reasonable grounds. For the details of your rights as data subject, you can get in touch
with our Data Privacy Officer at contact details below or at the NPC at
https://privacy.gov.ph. PNP RSS will take note of your request and shall reserve the
right to deal with the matter in accordance with the law.

Changes to the Privacy Notice

PNP RSS reserves the right to update or revise this privacy notice at any time and will
provide a new privacy notice whenever there are substantial changes. Prior versions of
the privacy notice shall be retained by the PNP and shall be provided to data subjects
upon request.
Feedback on our Privacy Notice
Suppose you have suggestions or comments regarding our privacy statement and
notice or for any issues concerning PNP RSS’s data privacy practices. In that case, you
may reach us through our Data Protection Officer / Compliance to Privacy Officer, PCOL
HENRY G DAMPAL, CS, PNP RSS, via this address: PNP RSS Camp BGen Rafael
Crame, Quezon City, or email us at pnprsd2023@gmail.com.