NMMJ Law Office - Crossing Puan

NMMJ Law Office - Crossing Puan Helping people with legal matters. Consultations, notary public and litigation. Contact us now for consultation!

💡 Before personal information is entered into a processing system, the data subject must be properly informed of importa...
11/08/2026

💡 Before personal information is entered into a processing system, the data subject must be properly informed of important details concerning the collection and processing of their personal information.

Under the Data Privacy Act of 2012, the following information must be furnished:

• Description of the personal information to be entered;
• Purposes for which the information will be processed;
• Scope and method of the processing;
• Recipients or classes of recipients to whom the information may be disclosed;
• Methods used for automated access, if any;
• Identity and contact details of the Personal Information Controller (PIC);
• Period for which the information will be stored; and
• The existence of the data subject's rights, including the right to access, correct, and lodge a complaint with the National Privacy Commission.

Providing this information promotes transparency and allows data subjects to make informed decisions about the processing of their personal information.

📌 Legal Basis: Section 16(b), Republic Act No. 10173 – Data Privacy Act of 2012

📖 For educational purposes only and not intended as legal advice. For specific legal concerns, consult a lawyer.

💡 The Data Privacy Act of 2012 grants every data subject important rights to protect their personal information. Under S...
10/08/2026

💡 The Data Privacy Act of 2012 grants every data subject important rights to protect their personal information. Under Section 16, these rights include:

• Right to be informed;
• Right to information before personal information is entered into a processing system;
• Right to access personal information;
• Right to rectification of inaccurate or incomplete personal information;
• Right to erasure or blocking of personal information in appropriate cases; and
• Right to damages for violations of their rights under the Act.

These rights empower individuals to have greater control over how their personal information is collected, used, and protected.

📌 Legal Basis: Section 16, Republic Act No. 10173 – Data Privacy Act of 2012

📖 For educational purposes only and not intended as legal advice. For specific legal concerns, consult a lawyer.

💡 Privileged communication is protected by law. When privileged communication is properly invoked under Section 15 of th...
09/08/2026

💡 Privileged communication is protected by law. When privileged communication is properly invoked under Section 15 of the Data Privacy Act of 2012, any evidence obtained from such privileged information is inadmissible, subject to existing laws and applicable rules and regulations.

This protection helps preserve the confidentiality of communications that the law recognizes as privileged, such as those protected under the Rules of Court and other pertinent laws.

📌 Legal Basis: Section 15, Republic Act No. 10173 – Data Privacy Act of 2012

📖 For educational purposes only and not intended as legal advice. For specific legal concerns, consult a lawyer.

💡 The Personal Information Controller (PIC) remains ultimately responsible and accountable for the processing of persona...
08/08/2026

💡 The Personal Information Controller (PIC) remains ultimately responsible and accountable for the processing of personal information, even when it has outsourced such processing to a Personal Information Processor (PIP).

While a PIP is also required to independently comply with the Data Privacy Act of 2012, the PIC cannot avoid its legal responsibilities by delegating the processing of personal information to another party.

📌 Legal Basis: Republic Act No. 10173 – Data Privacy Act of 2012

📖 For educational purposes only and not intended as legal advice. For specific legal concerns, consult a lawyer.

💡 A Personal Information Controller (PIC) may outsource or subcontract the processing of personal information to a Perso...
07/08/2026

💡 A Personal Information Controller (PIC) may outsource or subcontract the processing of personal information to a Personal Information Processor (PIP). However, outsourcing does not transfer the PIC's responsibility under the Data Privacy Act of 2012.

The PIC remains accountable for ensuring that appropriate safeguards are in place and that the processing of personal information complies with the law, including the protection of confidentiality, integrity, and security of the data.

📌 Legal Basis: Republic Act No. 10173 – Data Privacy Act of 2012

📖 For educational purposes only and not intended as legal advice. For specific legal concerns, consult a lawyer.

💡 When the processing of privileged information is based on consent, the prior consent of all parties to the privileged ...
06/08/2026

💡 When the processing of privileged information is based on consent, the prior consent of all parties to the privileged communication is required before any processing may lawfully take place.

This requirement reflects the confidential nature of privileged communications and ensures that the rights and interests of everyone involved are respected and protected.

📌 Legal Basis: Section 13, Republic Act No. 10173 – Data Privacy Act of 2012

📖 For educational purposes only and not intended as legal advice. For specific legal concerns, consult a lawyer.

💡 Sensitive Personal Information (SPI) may be processed for medical treatment when the processing is necessary, is carri...
05/08/2026

💡 Sensitive Personal Information (SPI) may be processed for medical treatment when the processing is necessary, is carried out by a medical practitioner or a medical treatment institution, and an adequate level of protection is ensured for the personal information being processed.

This exception enables the proper delivery of healthcare services while requiring that sensitive personal information remains protected against unauthorized access, disclosure, or misuse.

📌 Legal Basis: Section 13, Republic Act No. 10173 – Data Privacy Act of 2012

📖 For educational purposes only and not intended as legal advice. For specific legal concerns, consult a lawyer.

💡 The Data Privacy Act of 2012 permits the processing of Sensitive Personal Information (SPI) without the data subject's...
04/08/2026

💡 The Data Privacy Act of 2012 permits the processing of Sensitive Personal Information (SPI) without the data subject's prior consent when it is necessary to protect the life or health of the data subject or another person, and the data subject is legally or physically incapable of giving consent before the processing takes place.

This exception recognizes that, in emergency situations, the immediate protection of life and health may take precedence over obtaining prior consent.

📌 Legal Basis: Section 13, Republic Act No. 10173 – Data Privacy Act of 2012

📖 For educational purposes only and not intended as legal advice. For specific legal concerns, consult a lawyer.

💡 The Data Privacy Act of 2012 allows the processing of Sensitive Personal Information (SPI) by public organizations wit...
03/08/2026

💡 The Data Privacy Act of 2012 allows the processing of Sensitive Personal Information (SPI) by public organizations with noncommercial objectives, but only if all of the following conditions are met:

• The processing is confined to the organization's bona fide members;
• The Sensitive Personal Information is not transferred or disclosed to third parties; and
• The consent of the data subject is obtained prior to the processing.

These safeguards help ensure that Sensitive Personal Information is processed only for legitimate organizational purposes while protecting the privacy rights of individuals.

📌 Legal Basis: Section 13, Republic Act No. 10173 – Data Privacy Act of 2012

📖 For educational purposes only and not intended as legal advice. For specific legal concerns, consult a lawyer.

💡 When the processing of Sensitive Personal Information (SPI) is based on consent, the consent must be freely given, spe...
02/08/2026

💡 When the processing of Sensitive Personal Information (SPI) is based on consent, the consent must be freely given, specific to the particular purpose, informed, and obtained prior to the processing of the personal information.

This requirement ensures that data subjects clearly understand and voluntarily agree to how their sensitive personal information will be used before any processing takes place.

📌 Legal Basis: Section 13, Republic Act No. 10173 – Data Privacy Act of 2012

📖 For educational purposes only and not intended as legal advice. For specific legal concerns, consult a lawyer.

Address

2nd Floor, Door 2, KenMar Building (above 7-Eleven), Crossing Puan
Davao City
8000

Opening Hours

Monday 8:30am - 4:30pm
Tuesday 8:30am - 4:30pm
Wednesday 8:30am - 4:30pm
Thursday 8:30am - 4:30pm
Friday 8:30am - 4:30pm

Telephone

+639760302266

Website

Alerts

Be the first to know and let us send you an email when NMMJ Law Office - Crossing Puan posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.

Shortcuts

Share

Category