Data Privacy Act
Data Privacy Act Special / Miscellaneous Codals (often compiled) Republic Act No. 10173 - Data Privacy Act of 2012 CHAPTER I Section 1. Short Title Section 2. Declaration of Policy Section 3. Definition of Terms Section...
Results for “Data Privacy Act”
Under the 1987 Constitution, a bill titled the National Digital Governance and Data Privacy Act has been duly passed...
...1987 Constitution, a bill titled the National Digital Governance and Data Privacy Act has been duly passed by both the Senate and the House of Representatives. The President vetoes the bill, returning it with objections...
A city enacts Ordinance No. 2026-63 requiring all cybercafés operating within the city to secure a City Data Privacy...
...e nationwide authority to regulate personal data processing under the Data Privacy Act (Republic Act No. 10173) and has not yet acted on CDPP applications or issued implementing guidelines for the ordinance. SafeNet Café...
Citations: Republic Act No. 10173 (Data Privacy Act of 2012), National Privacy Commission (NPC) powers under RA 10173, IRR of the Data Privacy Act (RA 10173)
NovaTrade Inc., a Philippine-based e-commerce platform, collects personal data of customers (names, contact numbers,...
...the central issue of scope in cross-border data processing under the Data Privacy Act. It tests recognition of when Philippine-based processing extends beyond national borders and requires identifying roles...
Citations: Republic Act No. 10173 (Data Privacy Act of 2012), Implementing Rules and Regulations of the Data Privacy Act of 2012
A Philippine-based fintech company, FinTechPH, collects personal data of its users (names, contact details, account n...
...ubjects are residents of the Philippines. FinTechPH contends that the Data Privacy Act of 2012 (RA 10173) applies only to processing within the Philippines and that cross-border processing is outside the Act’s scope. (a)...
Citations: Republic Act No. 10173 (Data Privacy Act of 2012)
LuminaHealth PH, a Philippine-based health-tech platform, collects personal data of patients (names, contact informat...
...r context, avoiding overlap with prior items. Republic Act No. 10173 (Data Privacy Act of 2012), Implementing Rules and Regulat...
Citations: Republic Act No. 10173 (Data Privacy Act of 2012), Implementing Rules and Regulations of the Data Privacy Act of 2012, National Privacy Commission guidelines on cross-border data transfers
MedLink PH, a Philippine-based telemedicine platform, collects personal data of patients (names, contact details, med...
...bjects are residents of the Philippines. MedLink PH contends that the Data Privacy Act of 2012 (RA 10173) applies only to processing within the Philippines and that cross-border processing is outside the Act’s scope. (a)...
Citations: Republic Act No. 10173 (Data Privacy Act of 2012), Implementing Rules and Regulations of the Data Privacy Act (IRR), National Privacy Commission guidelines/advisories on cross-border data transfers under RA 10173
A city government e-services platform, CityLink, collects residents’ personal data (name, address, contact details, g...
...overnment e-services platform, CityLink, collects residents’ personal data (name, address, contact details, government-issued ID, geolocation from the app, and health data from connected wearables) and discloses this dat...
Citations: Republic Act No. 10173 (Data Privacy Act of 2012), Implementing Rules and Regulations (IRR) of RA 10173, National Privacy Commission guidelines and advisory opinions on data subject rights, lawful basis for processing, and data sharing with third parties
EduCloud Philippines, a Philippine-based online education platform, collects personal data of students (names, ages,...
...niversities in Singapore for benchmarking. EduCloud contends that the Data Privacy Act of 2012 (RA 10173) applies only to processing within the Philippines and that cross-border processing offshore is outside the Act’s s...
Citations: Republic Act No. 10173 (Data Privacy Act of 2012), NPC Implementing Rules and Regulations of RA 10173, NPC Guidelines on Cross-Border Data Transfers (as established by NPC)
LearnHub, a Philippines-based online learning platform, collects personal data from users during sign-up: full name,...
...nHub, a Philippines-based online learning platform, collects personal data from users during sign-up: full name, email address, age, and stated course interests. The privacy notice says data will be used to provide and i...
Citations: Republic Act No. 10173 (Data Privacy Act of 2012)., Implementing Rules and Regulations of the Data Privacy Act (IRR)., National Privacy Commission guidance on purpose limitation and data sharing.
A city passes Ordinance No. 2027-88 requiring all online platforms processing personal data within city limits to sec...
...e nationwide authority to regulate personal data processing under the Data Privacy Act and has not yet issued implementing guidelines or ruled on CDPP applications. DataPort Platform, Inc. files a petition for certiorari...
Citations: Republic Act No. 10173 (Data Privacy Act of 2012), National Privacy Commission (NPC) issuances and data privacy regulations
A mid-sized e-commerce company, QuantaShop, contracts a private medical clinic to perform a pre-employment medical ex...
...are Personal Information or Sensitive Personal Information under the Data Privacy Act, and state the controlling rule. (b) Based on the facts, assess the lawfulness of the processing for recruitment and the additional p...
Citations: Republic Act No. 10173 (Data Privacy Act of 2012), Implementation of the Data Privacy Act (IRR), National Privacy Commission guidance on processing of Sensitive Personal Information in employment contexts
A private logistics company, VeloData, engages a private clinic to perform a pre-employment medical screening of an a...
...are Personal Information or Sensitive Personal Information under the Data Privacy Act, and state the controlling rule. (b) Based on the facts, assess the lawfulness of the processing for recruitment and the additional p...
Citations: Republic Act No. 10173 (Data Privacy Act of 2012), National Privacy Commission (NPC) implementing rules and guidance on Sensitive Personal Information and purpose limitation
A private manufacturing company offers Employee J a telecommuting/flexible work arrangement under R.A. No. 11165. The...
...unionized; after two weeks, Employee J objects to the monitoring as a privacy invasion and claims the arrangement changes terms of employment without proper consultation. The employer asserts that the arrangement is lawf...
Citations: Republic Act No. 11165 (Flexible Work Arrangements Act), Republic Act No. 10173 (Data Privacy Act of 2012)
Aurora Packaging, a 150-employee manufacturing firm, has not adopted a Mental Health Policy or a Workplace Mental Hea...
...es Luz may seek. (c) Briefly discuss how the guidelines interact with privacy and anti-discrimination norms under disability law. This flashcard concentrates on the central doctrine of Labor Advisory No. 19—the employer’...
Citations: Labor Advisory No. 19, Sept. 15, 2023, Data Privacy Act of 2012 (Republic Act No. 10173), Magna Carta for Disabled Persons (Republic Act No. 7277)
Aurora Precision Industries, a medium-sized electronics manufacturer in Laguna, has a certified bargaining unit of 11...
...ithout leave in the past four months, with dates but with identifying data redacted to protect privacy. Management refuses, citing data privacy and business confidentiality. The Union contends the information is necessar...
Citations: Labor Code of the Philippines (general framework on union rights and information duties), Data Privacy Act of 2012, Republic Act No. 10173 (for privacy considerations and data-protection safeguards)
BuildRight HR Solutions, a private employment-services contractor, is engaged by a private engineering firm to perfor...
...are Personal Information or Sensitive Personal Information under the Data Privacy Act, and state the controlling rule. (b) Based on the facts, assess the lawfulness of the processing for recruitment and the additional p...
Citations: Republic Act No. 10173 (Data Privacy Act), Implementing Rules and Regulations (IRR) of the Data Privacy Act
CareNet Health, a Philippine telemedicine platform, collects from users at sign-up: full name, date of birth, contact...
...ame, date of birth, contact details, medical history, and appointment data. The privacy notice states that data will be used to provide and improve telemedicine services and may be shared with affiliates to achieve these...
Citations: Republic Act No. 10173 (Data Privacy Act of 2012), Implementing Rules and Regulations of the Data Privacy Act (IRR), National Privacy Commission guidance on data sharing and processor–controller roles
DeltaPharma Corp., a pharmaceutical manufacturer in Laguna, has a certified bargaining unit of 120 workers (QA and pr...
...without leave in the past two months, with dates but with identifying data redacted to protect privacy. Management refuses, citing data privacy and business confidentiality. The union contends the information is necessar...
Citations: Labor Code of the Philippines (rights and duties of employers and unions; information for bargaining), Republic Act No. 10173 (Data Privacy Act of 2012) and its relevant provisions on data minimization and confidentiality
DeltaWorks Corp., a private manufacturing firm, operates an on-site employee clinic in Pasig City. It collects employ...
...ollects employees’ health information and facial biometric attendance data to verify identity, manage sick leave, and tailor wellness programs. It contracts a cloud analytics provider, FireflyData, based in Ireland, to p...
Citations: Republic Act No. 10173 (Data Privacy Act of 2012), IRR of the Data Privacy Act (as implemented by the National Privacy Commission), NPC Circular/Guidelines on Processing Personal Data in the Cloud and Cross-Border Data Transfers
EcoVolunteer PH, a Philippine-based non-governmental organization, collects personal data of volunteers (names, conta...
...s are residents of the Philippines. EcoVolunteer PH contends that the Data Privacy Act of 2012 (RA 10173) applies only to processing within the Philippines and that cross-border processing is outside the Act’s scope. (a)...
Citations: Republic Act No. 10173 (Data Privacy Act of 2012), Implementing Rules and Regulations of the Data Privacy Act of 2012
Horizon Processing Plant, Inc., a mid-sized manufacturing firm in Caloocan City, has a certified bargaining unit cons...
...mber of unit employees on sick leave, with dates but with identifying data redacted or anonymized where necessary to protect privacy. Management refuses, citing data privacy and business confidentiality. The union conten...
Citations: Labor Code provisions on good faith bargaining and information disclosure to the bargaining agent, Data Privacy Act of 2012 (Republic Act No. 10173), National Labor Relations Commission decisions recognizing the information-disclosure duty in bargaining contexts
Jamoy Bank, a Philippine bank with its principal office in Manila, processes personal data of its customers (names, a...
...eyond the standard service communications. The bank contends that the Data Privacy Act of 2012 (RA 10173) applies only to processing within the Philippines and that cross-border processing outside the Philippines is outs...
Citations: Republic Act No. 10173 (Data Privacy Act of 2012), National Privacy Commission, Implementing Rules and Regulations (IRR) of the Data Privacy Act
MapleCloud Ltd., a Philippine-based HR outsourcing company, collects personal data of employees (names, addresses, co...
...bjects are residents of the Philippines. MapleCloud contends that the Data Privacy Act of 2012 (RA 10173) applies only to processing within the Philippines and that cross-border processing outside the Philippines is outs...
Citations: Republic Act No. 10173 (Data Privacy Act of 2012), Implementing Rules and Regulations of the Data Privacy Act of 2012 (IRR)