Pinahihinto ng National Privacy Commission (NPC) sa mga establisyemento ang pagre-require ng pirma at iba pang hindi angkop na detalye sa mga pinasasagutang contact tracing forms.
Ayon kay Atty. Stephen John Duma ng NPC Compliance and Monitoring Division, kasunod ito ng mga natanggap na impormasyon ng ahensya ukol sa ilang pribadong establisyemento at government offices na nanghihingi ng personal information, na hindi naman magagamit sa contact tracing.
“In every aspect of the data processing cycle, activities must observe the basic principles of transparency, legitimate purpose and proportionality,” ani Duma.
Pinaalalahanan ng Privacy Commission ang data protection officers (DPOs) na baguhin ang kanilang mga privacy notices and manual, at magsagawa muli ng privacy impact assessment na napapanahon sa health crisis.
Paliwanag ni Atty. Duma, responsibildad ng DPOs na maghatid ng malinaw na privacy notices sa pagbibigay impormasyon ng publiko.
“Detailed information on the relevant personal data flows must be provided. You should have a clear way of employing these activities and show in your privacy notices that they have adequate organizational, physical and technical capacity to protect data from collection to disposal,” dagdag ng abogado.
“The Commission is more than willing to provide businesses and agencies the required guidance in formulating policies and implementing measures that capture the privacy and protection needs of their data subjects.”
