Document background
The Data Protection Notice is a mandatory document required under the Philippines Data Privacy Act of 2012 for organizations that collect and process personal information. It serves as a transparent communication tool between the organization (as a Personal Information Controller) and individuals whose data is being processed (Data Subjects). The notice must be provided before or at the time of data collection and should clearly explain the organization's data processing activities, data subject rights, and compliance measures. This document is particularly crucial in the Philippine context, where strict penalties apply for non-compliance with data protection requirements and where the National Privacy Commission actively enforces privacy regulations. Organizations must regularly review and update their Data Protection Notice to reflect any changes in their data processing activities or updates to relevant laws and regulations.
