The Provincial Government of Aklan (PGA) is committed in protecting and respecting the privacy of the personal data it collects in compliance with Republic Act No. 10173 or the Data Privacy Act of 2012, and its implementing rules and regulations.
1. Personal Data Collected
PGA collects the following personal information:
• Email address
• Passport/Valid ID and Number
• Mobile Number
• Full Name
• Residence Address
• Personal Health Information
• Scanning History including scanning station, timestamp
2. Legal Basis for Personal Data Processing
PGA process data with Republic Act No. 10173 or the Data Privacy Act of 2012, and its implementing rules and regulations as its legal basis. In addition, Department of Interior and Local Government (DILG) Memorandum Circular 2020-077, under Section 3.7 mandates that, “... The LGU may make use of any available technology or application that could assist it in its actions relative to contact tracing….” Further, Department of Health (DOH) Administrative Order No. 2020-0015, under Section VII-C, directs local government units “to implement non-pharmaceutical interventions (NPIs) as minimum public health standards to mitigate the threat of COVID-19” which includes physical distancing, contactless transactions, and limited face-to-face interactions.
3. Data Collection
Data is collected primarily for contact tracing of individuals who are suspect, probable or confirmed for COVID-19 and other infectious diseases as well as the people they came in contact with.
Data collection happens when the user encodes their personal data in the online health declaration form; and when the QR Code of the user is scanned in the scanning stations which both uses a secure connection to the PGA Servers.
4. Information Security
PGA implements appropriate security protocols to prevent unauthorized access to personal data. These include encryption of data transmission, validation of user credentials before granting of access, password requirements for login access, user level access and functionality depending on user category and backup procedures.
5. Data Sharing
These security protocols are continuously evaluated and updated as the need arises.
PGA may share data in so far as the Republic Act No. 10173 or the Data Privacy Act of 2012, and its implementing rules and regulations, issuances of the National Privacy Commission (NPC) and other relevant laws allow it.
6. Retention and Deletion
PGA retains personal data as long as necessary for processing in accordance to purposes stated herein and in compliance with other relevant and applicable laws particularly its obligations under Republic Act No. 9470 or the National Archives of the Philippines Act of 2007.
7. Access, and Correction of Personal Database
Users have the right to access their personal data and any personal profile information that may be incorrect can be changed by the user or requested to be changed.
8. Right to Complain
If users believe that their data is processed in violation of their rights, they can send their complaint to firstname.lastname@example.org to resolve or clarify the issue before formally filing with the National Privacy Commission (NPC).
9. Controller and Contact Information
This system is owned, developed and managed by the Provincial Government of Aklan located at Provincial Capitol, Barangay Estancia, Municipality of Kalibo, Province of Aklan as the personal information controller.