Living in IT Era - Lesson 4 Midterms

MANUEL S.
ENVERGA UNIVERSITY FOUNDATION

COLLEGE OF COMPUTING AND MULTIMEDIA STUDIES
CHED CENTER OF DEVELOPMENT IN IT EDUCATION
Living in IT Era
Lesson 4
The Data Privacy Act of 2012 is a Philippine law that aims to protect the
privacy and security of personal information in both the public and
private sectors. It governs the collection, processing, and use of personal
data while promoting responsible data handling practices.
MANUEL S. ENVERGA UNIVERSITY FOUNDATION

Data Subject Rights
The law grants individual certain rights over their personal data,
including the right to be informed, access, correct, object, and have their
data erased or blocked.

Data Subject Rights

If a Filipino individual signs up for an online shopping website, they have the right
to access their account information, correct their address if it's wrong, and opt-out of
receiving promotional emails.
Consent
Organizations must obtain informed and explicit consent from

individuals before collecting and processing their personal data.
Consent should be freely given and specific.

Consent
A healthcare provider in the Philippines must obtain the patient's consent to collect,
process, and share their medical records with other healthcare professionals
involved in their care.
Data Security Measures
The law requires organizations to implement security measures to

protect personal data from data breaches and unauthorized access. Data
breaches must be reported to the NPC and affected data subjects.

Data Security Measures

A Philippine bank must implement encryption and access controls to safeguard
customer account information. If a data breach occurs, they must promptly report it
to the NPC and inform affected customers.
Cross-Border Data Transfers
Regulations are in place to govern the transfer of personal data outside

the Philippines to ensure adequate protection.

Cross-Border Data Transfers

A Philippine e-commerce company that stores customer data on servers located
abroad must comply with the law's requirements for secure international data
transfers.
Registration
Certain data processing systems involving personal data need to be

registered with the NPC, subject to exemptions.

Registration
A Philippine government agency that manages citizen records must register its data
processing system with the NPC to ensure it complies with data privacy regulations.
Data Privacy Commission (DPC)
The National Privacy Commission (NPC) is established as the

regulatory authority responsible for enforcing the Data Privacy Act and
ensuring compliance.
DPOs are responsible for managing data privacy programs, conducting

risk assessments, providing data protection advice, and serving as a
point of contact for data subjects and regulatory authorities.

DPC
he Data Privacy Commission is a government regulatory body with authority over
all organizations that process personal data in the Philippines. It has the power to
investigate, penalize, and enforce data privacy laws at a national level.
Data Protection Officers (DPOs)
Organizations handling personal data must appoint Data Protection

Officers to oversee data privacy compliance within their organizations.
The DPC's primary role is to regulate and enforce data privacy laws and
regulations in the country. It is responsible for investigating complaints,
monitoring compliance, imposing penalties for violations, and providing
guidance on data privacy matters.

DPO
DPOs have authority within the organization that appoints them. They do not have
regulatory authority over other organizations but ensure that their own organization
complies with data protection laws.
Penalties
Violations of the Data Privacy Act can result in fines, imprisonment, or

both, depending on the severity of the violation.

The Data Privacy Act of 2012
The Data Privacy Act of 2012 is essential in the digital age to

safeguard individuals' privacy and personal information. It aligns the
Philippines with international data protection standards, ensuring
responsible data handling while giving individuals control over their
data.


Living in IT Era - Lesson 4 Midterms

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Living in IT Era - Lesson 4 Midterms

Uploaded by

Copyright:

Available Formats

MANUEL S.

ENVERGA UNIVERSITY FOUNDATION

MANUEL S. ENVERGA UNIVERSITY FOUNDATION

MANUEL S. ENVERGA UNIVERSITY FOUNDATION

Data Subject Rights

Organizations must obtain informed and explicit consent from

MANUEL S. ENVERGA UNIVERSITY FOUNDATION

The law requires organizations to implement security measures to

MANUEL S. ENVERGA UNIVERSITY FOUNDATION

Data Security Measures

Regulations are in place to govern the transfer of personal data outside

MANUEL S. ENVERGA UNIVERSITY FOUNDATION

Cross-Border Data Transfers

Certain data processing systems involving personal data need to be

MANUEL S. ENVERGA UNIVERSITY FOUNDATION

The National Privacy Commission (NPC) is established as the

DPOs are responsible for managing data privacy programs, conducting

MANUEL S. ENVERGA UNIVERSITY FOUNDATION

Organizations handling personal data must appoint Data Protection

MANUEL S. ENVERGA UNIVERSITY FOUNDATION

Violations of the Data Privacy Act can result in fines, imprisonment, or

MANUEL S. ENVERGA UNIVERSITY FOUNDATION

The Data Privacy Act of 2012 is essential in the digital age to

MANUEL S. ENVERGA UNIVERSITY FOUNDATION

You might also like