All protected by the Data Privacy Act and the principles for acquiring, using, storing, protecting, sharing and disposing such are being followed. Security controls should have been established and should clearly describe how the data obtained will be protected. Lastly, there must be a guarantee and commitment that whatever data obtained shall be properly disposed of, in accordance with the rules of the Data Privacy Act, or after a previously agreed upon data retention period. The existence of sensitive personal data, unless well justified, should always have a limit with regard to its existence. Even in these trying times, the government and other organizations that need such data should always adhere to the rights of every individual with respect to the privacy of their data.

Source: Manila Times April 29, 2020 16:30 UTC