Ateneo de Davao University Data Protection Office

Pwede nga ba 'yon? 🤨

Answer in the comment section 👇

𝐍𝐎𝐓𝐈𝐂𝐄 𝐎𝐅 𝐏𝐔𝐁𝐋𝐈𝐂 𝐂𝐎𝐍𝐒𝐔𝐋𝐓𝐀𝐓𝐈𝐎𝐍

The National Privacy Commission (NPC) is inviting Personal Information Controllers (PICs), Personal Information Processors (PIPs), and other interested stakeholders to submit comments, suggestions, and other inputs on the draft Guidelines on the Processing of Personal Data for the Availment of Statutory, Government-Mandated, and Other Special Privileges to be adopted by the NPC.

These guidelines seek to streamline the process for availing statutory, government-mandated, and other special privileges, while minimizing unnecessary or excessive processing of personal data in the course of such availment.

Please refer to the Draft NPC Circular at this link:https://privacy.gov.ph/wp-content/uploads/2026/06/Final-draft-Circular-Guidelines-on-the-Processing-of-Personal-Data-for-the-Availment-of-Privileges_18-May-2026.pdf

Send your comments to [email protected] no later than 16 June 2026, with the subject line: “Public Consultation – Availment of Privileges.”

The NPC will conduct an online public consultation on 25 June 2026 at 2:00 pm. Participants who wish to join the consultation may signify their attendance by sending an email on or before 22 June 2026.

Thank you.

Ayon sa Section 3(l) ng Republic Act No. 10173, ang mga records na may kinalaman sa edukasyon ng isang tao, kabilang ang mga grado, ay classified bilang sensitive personal information na nangangailangan ng mas mataas na antas ng proteksyon.

Base sa NPC PHE Bulletin No. 17 at Advisory Opinion No. 2020-046, ang mga paaralan ay may tungkulin na panatilihin ang confidentiality ng mga academic results. Ang pagpost ng grades kung saan makikita ng ibang tao ang performance ng isang estudyante ay maaring lumabag sa principle of proportionality dahil pwede naman itong ipaalam sa pamamagitan ng mga pribadong paraan gaya ng email, sealed report cards, o secure student portals.

Paano naman kung student number at grade, imbis na pangalan? Depende po yan. Maaaring i-consider na PSEUDONYMIZED na ito, isang paraan upang protektakan ang kanilang identity.

Pinahihintulutan din ang pag-post ng mga pangalan at karangalan ay kung mayroong malinaw na consent mula sa data subject o kung ito ay bahagi ng legitimate policy ng paaralan para sa recognition ng academic excellence, ngunit dapat pa ring limitahan ang impormasyon sa kung ano lamang ang kinakailangan.

Tanong ni Dee Vee sa comment section...

Violation nga ba? 🤔

Answer in the comment section 👇

Ayon sa NPC Advisory Opinion No. 2025-017, ang mga school records gaya ng grade breakdowns, examinations, quizzes, performance evaluations, at pati na ang teacher comments ay itinuturing na personal data, partikular na bilang sensitive personal information sa ilalim ng Data Privacy Act (DPA).

Dahil dito, narito ang mga dapat nating tandaan:

Ang bawat data subject ay may karapatang mag-access ng kanilang personal data. Dahil minor pa ang student, ang mga magulang o legal guardians ang pwedeng mag-exercise ng karapatang ito para sa kanila.
Bilang Personal Information Controllers (PIC), obligasyon ng mga eskwelahan na magbigay ng reasonable access sa mga records na ito sa paraang transparent at timely.

Habang ibinibigay ang access, kailangan din siguraduhin ng school na protektado ang privacy ng ibang tao. Halimbawa, pwedeng i-redact o takpan ang pangalan ng ibang estudyante na makikita sa parehong record.

Kung ang school ay tumanggi o nag-ignore sa inyong request para sa access nang walang basehan, maaari kayong mag-file ng reklamo sa NPC upang ma-evaluate kung may violation sa DPA.

Hmmm....

Answer in the comment section 👇

📱 ATTENTION: Blue Knight Content Creators & Vloggers!

Recording your life on campus is a great way to share the Ateneo de Davao spirit, but are you doing it responsibly? The National Privacy Commission (NPC) recently released Circular No. 2025-01, and it’s a game-changer for everyone hitting the "Record" button.

Whether you're a student influencer or just vlogging your lunch at the cafeteria, here is what you need to know to stay privacy-compliant:

🎥 1. Vlogging = Data Processing
When you record people—even by accident—and post it online, you are officially processing personal data under the Data Privacy Act of 2012. Privacy rules apply the moment you aim that camera!

📢 2. Transparency is Key
Inform your subjects: Let people know they are being recorded and where the video will be posted.

Privacy Notice: Add a link or a section on your social media profiles explaining how people can contact you if they want their image removed.

🤝 3. Respect Consent & Rights
If you are featuring someone prominently, get their consent first. If someone asks you to take down a video they appear in, you are legally required to respond to that request.

👤 4. Blur the Bystanders
Protect our community! You are required to blur or mask the faces of:

Bystanders who didn't agree to be filmed.

Children and vulnerable individuals.

Pro-tip: Do this during the editing phase before you hit upload!

⚖️ 5. Keep it Fair & Lawful
Your content should never be intrusive or oppressive. Always practice fairness and respect for the personal space of your fellow Blue Knights.

💰 6. Monetizing? You Must Register!
If your channel is monetized, you are required to register with the NPC. Staying "under the radar" isn't worth the risk.

⚠️ The Stakes are Real
Failure to comply isn't just a social media "cancel" moment—it carries legal weight:

Show-cause orders from the NPC.

Fines of up to ₱50,000.

Criminal, civil, or administrative liabilities under the law.

"Protecting the privacy of our community is a shared responsibility. Let's keep our vlogs fun, creative, and most importantly, respectful of everyone's data rights."

— Office of the Data Protection Officer, Ateneo de Davao University

𝐏𝐑𝐄𝐒𝐒 𝐒𝐓𝐀𝐓𝐄𝐌𝐄𝐍𝐓

𝐎𝐧 𝐑𝐞𝐩𝐨𝐫𝐭𝐬 𝐨𝐟 𝐚𝐧 𝐀𝐥𝐥𝐞𝐠𝐞𝐝 𝐃𝐚𝐭𝐚 𝐁𝐫𝐞𝐚𝐜𝐡 𝐈𝐧𝐯𝐨𝐥𝐯𝐢𝐧𝐠 𝐆-𝐗𝐜𝐡𝐚𝐧𝐠𝐞, 𝐈𝐧𝐜. (𝐆𝐂𝐚𝐬𝐡)

The National Privacy Commission (NPC) urges the public to exercise heightened vigilance following reports of data leak allegedly involving G-Xchange, Inc., operator of GCash, which surfaced online on 26 October 2025.

Read more below or on our website: https://privacy.gov.ph/on-reports-of-an-alleged-data-breach-involving-g-xchange-inc-gcash/