Data processing systems refer to the structure and procedure for collecting and processing personal data in an information or filing system.
What does “data processing systems” mean under the Implementing Rules and Regulations? Read More »
Data sharing involves the disclosure or transfer of personal data to a third party or another personal information controller.
How is “data sharing” defined in the rules? Read More »
The Act does not apply to specific information regarding the position, title, and functions of a current or former government employee.
Transparency requires that data subjects are fully aware of the nature, purpose, risks, and extent of their personal data processing.
How is the principle of transparency applied in the processing of personal data? Read More »
Proportionality dictates that data processing must be adequate, relevant, necessary, and not excessive relative to its declared purpose.
What constitutes the principle of proportionality under the implementing rules? Read More »
Personal data shall only be retained for as long as necessary for its declared purpose, legal claims, or legitimate business.
How long can personal data be legally retained under the rules? Read More »
Data sharing for commercial purposes requires a data sharing agreement establishing adequate safeguards and is subject to Commission review.
Controllers must implement data protection policies covering organizational, physical, and technical security measures tailored to the specific processing risks.
What must a personal information controller do regarding data protection policies? Read More »
Records must describe the processing system, purposes, data subjects, data flow, security measures, and accountable compliance officers.
What essential details must be included in the records of processing activities? Read More »
Policies must prevent mechanical file destruction, and workstations must be secured against natural disasters, power issues, and unauthorized access.
