A person whose personal information is collected, stored and processed is called a data subject. Individuals and businesses who deal with personal information are required to observe and respect a person’s data privacy rights. The Philippine National Privacy Commission, which administers the Philippines’ “Data Privacy Act of 2012” (“DPA”), explained that an individual’s personal data is treated in the same way as his/her own personal property. Personal data should never be collected, processed and stored without his/her explicit consent.
Businesses can get this consent through a Data Privacy Consent Form. Under the DPA, consent is one of the acceptable ways to lawfully process personal data. Consent is defined as “any freely given, specific, informed indication of will, whereby the data subject agrees to the collection and processing of his or her personal, sensitive or privileged information.”