THE National Privacy Commission (NPC) said that political parties, candidates, partylist groups or organizations and their nominees should adhere to the provisions of the Data Privacy Act (DPA) of 2012 in collecting personal data of individuals in connection with their electoral campaigns.
In a statement late Monday, the privacy watchdog said individuals must be clearly informed of the purpose of data collection, and the amount of information gathered must be limited to what is necessary.
The NPC said the DPA, its Implementing Rules and Regulations, are relevant to NPC issuances.
NPC Advisory No. 2021–03 provides that the processing of personal data for election campaign purposes must adhere to the general data privacy principles of transparency, legitimate purpose, and proportionality.
The processing of personal information must always have a lawful basis, such as valid and freely given consent, said the NPC, citing the DPA.
The NPC said political organizations and candidates have a duty to implement appropriate organizational, physical, and technical security measures to protect the personal information they collect.
It added that they are also accountable for ensuring that all personal data is processed fairly and lawfully.
“We also urge the public to exercise caution when giving out personal information. Always ask why your data is being collected, how it will be used, and who will have access to it. If something feels unclear or questionable, you have the right to object. Protect your privacy and do not share your personal data if you feel pressured, misled, or unsure,” the NPC said.
The NPC urged anyone who believes their personal data has been improperly collected or misused to file a complaint through their official website: www.privacy.gov.ph, or reach them via email at complaints@privacy.gov.ph
