MT6313 RA10173 Flashcards
AN ACT PROTECTING INDIVIDUAL PERSONAL INFORMATION IN INFORMATION AND COMMUNICATIONS SYSTEMS IN THE GOVERNMENT AND THE PRIVATE SECTOR, CREATING FOR THIS PURPOSE A NATIONAL PRIVACY COMMISSION, AND FOR OTHER PURPOSES
RA 10173
What is the title of RA 10173?
“Data Privacy Act of 2012′′.
What is Section 2 of RA 10173?
Declaration of Policy
What does the declaration of policy of RA 10173 state?
Protect the fundamental human right of privacy, of communication while ensuring free flow of information
Vital role of information and communications technology in nation- building
To ensure that personal information in information and communications systems in the government and in the private sector are secured and protected.
What is section 3 of RA 10173?
Definition of Terms
What are the terms listed under section 3 of RA 10173?
a. Commission
b. Data subject
c. Personal data
d. Personal information
e. Personal information controller
f. Processing
What does the term “commission” refer to? (RA 10173)
National Privacy Commission
What does the term “data subject” refer to? (RA 10173)
Individual whose personal information is processed
What does the term “personal information” refer to? (RA 10173)
Information on the identity of the individual in which it is apparent and can be ascertained by the entity holding the information, or when put together with other information would directly identify the individual
What does the term “personal information controller” refer to? (RA 10173)
A person or organization who controls the collection, holding, processing or use of personal information, excluding people who have been instructed only to execute these functions and those who hold personal information in connection with the person’s family or household affairs
What does the term “processing” refer to? (RA 10173)
Any operation performed upon personal information (collection, recording, organizing, storage, updating or modification, retrieval, consultation, use, consolidation, blocking, erasure or destruction of data)
What is section 4 of RA 10173?
SCOPE
What does RA 10173 NOT apply to?
Information about any individual who is or was an officer or employee of a government institution
Information about an individual who is or was performing service under contract for a government institution
Information relating to any discretionary benefit of a financial nature
Personal information processed for journalistic, artistic, literary or research purposes
Information necessary in order to carry out the functions of public authority
Information necessary for banks and other financial institutions
Personal information originally collected from residents of foreign jurisdictions
What is section 5 of RA 10173?
Protection Afforded to Journalists and Their Sources.
In section 5 of RA 10173, nothing in the act shall be construed as having amended what Republic act?
RA 53
What is included in the information about any individual who is or was an officer or employee of a government institution?
Fact that s/he was/is an officer of the government institution
Title, business address and office telephone number
Classification, salary range and responsibilities of the position
The name of the individual on a document prepared
In section 4(e) of RA 10173, nothing in the act should be construed as amending or repealing what republic acts?
RA 1405
RA 6426
RA 9510
What is the Secrecy of Bank Deposits Act?
RA 1405
What is the Foreign Currency Deposit Act?
RA 6426
What is the Credit Information Systems Act?
RA 9510
The information necessary for banks and other financial institutions is under the jurisdiction of?
Bangko Sentral ng Pilipinas or central monetary authority
What RA does the exclusion of the information necessary for banks and other financial institutions comply with in section 4 of RA 10173?
RA 9160 Anti-Laundering Act and RA 9510
Section 6 of RA 10173 is entitled?
Extraterritorial Application.
Section 6 of RA 10173 states that the act applies to any action done in or out of the PH by an entity if the action, practice or processing relates to?
Personal information about a Philippine citizen or a resident
Section 6 of RA 10173 states that the act applies to any action done in or out of the PH by an entity if the entity has?
Other links in the PH, or has links in the PH, where the entity is processing personal information in the Philippines or even if the processing is outside the Philippines as long as it is about Philippine citizens or residents
What is section 7 of RA 10173 entitled?
Functions of the National Privacy Commission
The National Privacy Commission should review, approve, reject or require modification of privacy codes voluntarily adhered to by personal information controllers, provided that? (3)
- That the privacy codes shall adhere to the underlying data privacy principles
- Privacy codes may include private dispute resolution mechanisms for complaints against any participating personal information controller
- The Commission shall consult with relevant regulatory agencies in the formulation and administration of privacy codes applying the standards in this Act
Can the commission propose legislation, amendments or modifications to Philippine laws?
Yes
What section of RA 10173 is Confidentiality?
8
What section is the Organizational Structure of the Commission?
9
The commission (RA 10173) shall be attached to?
Department of Information and Communications Technology (DICT)
Who is the chairman of the National Privacy Commission?
Privacy Commissioner
The chairman of the commission (RA 10173) shall be aided by?
Two Deputy Privacy Commissioners, 1 for Data Processing Systems and the other for Policies and Planning.
Who appoints the chairman and the 2 deputy officers?
President of the Philippines
How long is the term of the chairman and deputy officers?
3 yrs and then can extend to 3 more if appointed again
Requirements for the privacy commissioner?
must be at least thirty-five y/o
good moral character, unquestionable integrity and known probity, and a recognized expert in the field of information technology and data privacy
shall enjoy the benefits, privileges and emoluments equivalent to the rank of Secretary
Who is the present Privacy Commissioner or Chairman of the Commission?
Raymund Enriquez Liboro
What are the requirements for the Dept. Privacy Commissioners?
recognized experts in the field of information and communications technology and data privacy.
shall enjoy the benefits, privileges and emoluments equivalent to the rank of Undersecretary.
Who are the current Dept. Privacy Commissioners?
Leandro Angelo Aguirre
John Henry Du Naga
What is section 10 of RA10173 entitled?
The Secretariat.
Major members of the Secretariat must serve for how many years in what government agencies?
5 yrs in any of the following:
SSS
GSIS
LTO
BIR
PHILHEALTH
COMELEC
DFA
DOJ
PHILPOST
What section is the General Data Privacy Principles?
11
What section states that:
“The processing of personal information shall be allowed, subject to compliance with the requirements of this Act and other laws allowing disclosure of information to the public and adherence to the principles of transparency, legitimate purpose and proportionality.”
11
In section 11 of RA 10173, personal information must be?
- Collected for specified and legitimate purposes
- Processed fairly and lawfully
- Accurate, relevant and kept up to date for processing personal information
- Adequate and not excessive in relation to the purposes for which they are collected and processed
- Retained only for as long as necessary
- Kept in a form which permits identification of data subjects for no longer than is necessary
Section 12 is entitled?
Criteria for Lawful Processing of Personal Information
Lawful processing of information is permissible under what conditions?
- Data subject has given consent
- Personal information is necessary and is related to the fulfillment of a contract
- For compliance with a legal obligation
- To protect vitally important interests
- To respond to national emergency, to comply with the requirements of public order and safety, or to fulfill functions of public authority
- Legitimate interests pursued by the personal information controller or by a third party or parties to whom the data is disclosed