Document background
An External Privacy Notice is a mandatory document required under the Philippines Data Privacy Act of 2012 for organizations that collect and process personal information. This document must be provided to data subjects (such as customers, users, or website visitors) before or at the time of data collection. The notice should be written in clear, simple language and must include specific information required by law, such as the types of personal data collected, purposes of processing, data sharing practices, security measures, and data subject rights. The External Privacy Notice serves both as a compliance tool and a trust-building mechanism, demonstrating the organization's commitment to data protection and transparency. It must be regularly reviewed and updated to reflect changes in data processing activities or legal requirements, and should be easily accessible to all data subjects, typically through the organization's website or physical locations.
