Ateneo de Davao University Data Protection Office

17/08/2026

Do you know the difference between Personal Information and Sensitive Personal Information? 🛡️

Not all data is created equal! Under data privacy laws , personal data is categorized based on how much risk it poses if leaked or misused.

🔹 Personal Information (PI)
This is any information that can directly or indirectly identify you as an individual.

Examples: Full name, personal email address, home address, phone number, job title, or IP address.

⚠️ Sensitive Personal Information (SPI)
This is high-risk data that requires higher levels of security and legal protection because its exposure could lead to discrimination, financial harm, or serious privacy violations.

Examples:

Government-issued IDs (SSN, Passport, Driver’s License)
Health, medical, and genetic records
Biometric data (fingerprints, facial recognition)
Financial records (bank account numbers, credit cards)
Race, ethnicity, religion, political affiliations, or sexual orientation

Why does this distinction matter?
Organizations are legally held to much stricter standards when handling your sensitive data—and you have the right to give explicit consent before it's collected!

Stay informed and protect your digital footprint. 🔒

14/08/2026

Not all personal data is created equal.

Sharing your email address is one thing... but sharing your Sensitive Personal Information is a whole different story.

Do you know the difference? Stay tuned. 🛡️

11/08/2026

10/08/2026

Did you know? 🔒

Long before the internet and social media, Justice Louis Brandeis famously described privacy as:

“...the right to be left alone — the most comprehensive of rights and the right most valued by civilized men.”
— (Brandeis J, dissenting in Olmstead v. United States, 277 U.S. 438 [1928])

In today’s digital world, data privacy means you have the right to control how your personal information is collected, used, and shared. 🛡️

Take charge of your digital footprint today! 💻✨

31/07/2026

‼️ Save the date!

ARE YOU READY to hit the road of privacy learning again?

​The Data Privacy Training Roadshow 2026 is heading your way! We're taking data protection expertise nationwide, bringing interactive sessions, key privacy insights, and compliance updates straight to your region. 🚀✨

​Mark your calendars and save the dates!
​📍 Cebu: September 21–22
📍 Davao: September 24–25
📍 Pampanga or Manila: October 8–9
📍 South: October 15–16

​Stay tuned! Registration details and full program mechanics will be announced very soon!

​Got questions in the meantime? Reach out to us:
📧 Email: [email protected]
💬 Facebook: Data Privacy Council
​

15/06/2026

Pwede nga ba 'yon? 🤨

Answer in the comment section 👇

04/06/2026

𝐍𝐎𝐓𝐈𝐂𝐄 𝐎𝐅 𝐏𝐔𝐁𝐋𝐈𝐂 𝐂𝐎𝐍𝐒𝐔𝐋𝐓𝐀𝐓𝐈𝐎𝐍

The National Privacy Commission (NPC) is inviting Personal Information Controllers (PICs), Personal Information Processors (PIPs), and other interested stakeholders to submit comments, suggestions, and other inputs on the draft Guidelines on the Processing of Personal Data for the Availment of Statutory, Government-Mandated, and Other Special Privileges to be adopted by the NPC.

These guidelines seek to streamline the process for availing statutory, government-mandated, and other special privileges, while minimizing unnecessary or excessive processing of personal data in the course of such availment.

Please refer to the Draft NPC Circular at this link:https://privacy.gov.ph/wp-content/uploads/2026/06/Final-draft-Circular-Guidelines-on-the-Processing-of-Personal-Data-for-the-Availment-of-Privileges_18-May-2026.pdf

Send your comments to [email protected] no later than 16 June 2026, with the subject line: “Public Consultation – Availment of Privileges.”

The NPC will conduct an online public consultation on 25 June 2026 at 2:00 pm. Participants who wish to join the consultation may signify their attendance by sending an email on or before 22 June 2026.

Thank you.

21/04/2026

Ayon sa Section 3(l) ng Republic Act No. 10173, ang mga records na may kinalaman sa edukasyon ng isang tao, kabilang ang mga grado, ay classified bilang sensitive personal information na nangangailangan ng mas mataas na antas ng proteksyon.

Base sa NPC PHE Bulletin No. 17 at Advisory Opinion No. 2020-046, ang mga paaralan ay may tungkulin na panatilihin ang confidentiality ng mga academic results. Ang pagpost ng grades kung saan makikita ng ibang tao ang performance ng isang estudyante ay maaring lumabag sa principle of proportionality dahil pwede naman itong ipaalam sa pamamagitan ng mga pribadong paraan gaya ng email, sealed report cards, o secure student portals.

Paano naman kung student number at grade, imbis na pangalan? Depende po yan. Maaaring i-consider na PSEUDONYMIZED na ito, isang paraan upang protektakan ang kanilang identity.

Pinahihintulutan din ang pag-post ng mga pangalan at karangalan ay kung mayroong malinaw na consent mula sa data subject o kung ito ay bahagi ng legitimate policy ng paaralan para sa recognition ng academic excellence, ngunit dapat pa ring limitahan ang impormasyon sa kung ano lamang ang kinakailangan.

Tanong ni Dee Vee sa comment section...

Violation nga ba? 🤔

Answer in the comment section 👇

15/04/2026

Ayon sa NPC Advisory Opinion No. 2025-017, ang mga school records gaya ng grade breakdowns, examinations, quizzes, performance evaluations, at pati na ang teacher comments ay itinuturing na personal data, partikular na bilang sensitive personal information sa ilalim ng Data Privacy Act (DPA).

Dahil dito, narito ang mga dapat nating tandaan:

Ang bawat data subject ay may karapatang mag-access ng kanilang personal data. Dahil minor pa ang student, ang mga magulang o legal guardians ang pwedeng mag-exercise ng karapatang ito para sa kanila.
Bilang Personal Information Controllers (PIC), obligasyon ng mga eskwelahan na magbigay ng reasonable access sa mga records na ito sa paraang transparent at timely.

Habang ibinibigay ang access, kailangan din siguraduhin ng school na protektado ang privacy ng ibang tao. Halimbawa, pwedeng i-redact o takpan ang pangalan ng ibang estudyante na makikita sa parehong record.

Kung ang school ay tumanggi o nag-ignore sa inyong request para sa access nang walang basehan, maaari kayong mag-file ng reklamo sa NPC upang ma-evaluate kung may violation sa DPA.

Hmmm....

Answer in the comment section 👇