Privacy Notice
PSA Privacy Statement
The Philippine Statistics Authority (PSA) is committed to fully protect the privacy and security of your personal information in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA).
PSA will outline the methods by which we process your personal data and issue a distinct privacy notice in an appropriate format and manner whenever personal data is collected through various channels (e.g., public-facing data processing systems, notices displayed at PSA reception areas during events, or via attendance sheets and registration forms in accordance with the PSA's mandate).
In all instances, we assure our Data Subjects that processing your personal information will strictly follow the provisions of the DPA, especially the general data privacy principles of Transparency, Legitimate Purpose, and Proportionality.
PSA Website Privacy Notice
Our official website www.psa.gov.ph
This Privacy Notice is for the PSA's website. These functionalities enable the PSA to collect and process your personal information.
PSA Data Request and Feedback Forms
Information sent thru the PSA data request and feedback forms will be used only to help us gather/process the data that may be requested and to respond to requests via e-mail. In responding to requests, the information provided may be viewed by various people within the PSA. PSA personnel usually collect identifiable information such as name or e-mail address for record purposes. Nevertheless, this information will not be disclosed outside of PSA without user's consent, except when authorized or required by law.
Cookies
A cookie is a small text file that is stored on a user's computer for record-keeping purposes. The PSA website uses cookies for its tree navigation. This is to remember the users’ current selection in the navigation.
Personal Data Collected and Manner of Collection
Data Collected When Visiting This Website
When visiting this website, the PSA web server makes a record of the user's visit and logs the following information:
- The date and time of visit to this site
- The ISP / location
- The type of browser used
- The plug-ins, operating system and resolution used
- The previous site visited
The data listed above are collected for the following purposes:
- to analyze trends (i.e. Generating Web site statistics);
- to administer the site;
- to track users' movements around the site; and
- to gather demographic information about our user base as a whole.
Basis, Use, and Purpose for Processing of Personal Data
While we may request your consent to process your personal information, PSA may also process personal information without the consent of the Data Subject, especially when the processing is pursuant to our mandate or in compliance with Section 12 or Section 13 of the DPA.
In these instances, your personal information is utilized for the following purposes:
- For documentation and processing of inquiries and document requests within the
PSA, enable the PSA to address them properly. To solicit feedback for the services
we provide. - To provide you with the appropriate updates and advisories;
- To comply with a legal obligation of the PSA;
- To comply with public order and safety requirements or to fulfill public authority's
functions, including processing personal information. - To be able to provide the appropriate action that a data subject may require
concerning their data privacy rights.
Moreover, we may collect other personal data that are relevant and necessary to perform our mandate pursuant to RA No. 10625 or the Philippine Statistical Act of 2013, RA No. 11315 or the Community-Based Monitoring System Act, RA No. 11055 or the Philippine Identification System Act, and the PSA’s Citizens Charter.
Disclosure of Personal Data
Personal data processed by the PSA is not shared with any other party pursuant to RA No. 10625 unless such disclosure is allowed under Section 12 or 13 of the DPA of 2012.
Risks Involved
Risk refers to the possibility of an incident causing harm or endangering a data subject or organization. It includes the unauthorized collection, use, disclosure, or access to personal data, as well as threats to the confidentiality, integrity, and availability of personal data. Additionally, it covers the potential for processing activities to contravene data privacy principles or violate the rights of data subjects.
The PSA implements appropriate physical, technical, and organizational security measures to safeguard the confidentiality, integrity, and availability of personal information. However, it cannot guarantee absolute protection against certain risks associated with personal data processing, such as exposure to targeted cyberattacks, malware, ransomware, computer viruses, or unauthorized access to manual records.
However, adequate policies are in place to ensure appropriate security incident management in line with existing National Privacy Commission (NPC) policies, circulars, and other issuances.
Data Protection and Security Measures
We safeguard the confidentiality, integrity, and availability of your personal information by maintaining a combination of organizational, physical, and technical security measures based on generally accepted data privacy and information security standards. Among the measures we implement are the following:
- Policies on access control in both digital and physical infrastructures to prevent
unauthorized access to personal information. - Acceptable use policies
- End-to-end encryption and data classification whenever suitable.
- Security measures against natural disasters, power disturbances, external access,
and similar threats. - Technical measures to protect our computers and databases against accidental,
unlawful, or unauthorized usage, interference, or access.
Storage and Retention
We store personal information in our computers and servers maintained in a secure environment. Additionally, we may use cloud-based third-party storage providers to store your information. Appropriate safeguards will be implemented to ensure the protection of your data.
Disposal
Physical records will be discarded through shredding, and digital files will be anonymized. In all cases, we will ensure that disposal methods prevent unauthorized individuals from retrieving, processing, or accessing personal information.
Rights of a Data Subject
Under the DPA, you have the right to be informed regarding processing the personal information we hold about you.
Further, you may be entitled to request:
- Right to Access. It is your right to obtain reasonable access to your personal information process by the PSA;
- Right to Rectification. As Data Subject, it is your right to dispute the inaccuracy or error in the processed personal information and inform the Personal Information Controller to correct in accordance with the existing policy or process;
- Right to Object. You have the right to object to the processing of the personal data if the processing involved is based on consent or legitimate interest pursuant to existing laws;
Suppose you have reason to believe that your right to privacy has been violated relative to the processing of information performed by the Philippine Statistics Authority. In that case, you may report the incident via email at dpo@psa.gov.ph.
In addition, you have the right to seek compensation if you believe you have suffered harm due to personal data that is inaccurate, incomplete, outdated, false, unlawfully obtained, or improperly used, or if your rights and freedoms as a data subject have been violated by filing a complaint with the National Privacy Commission.
Changes to the Privacy Notice
PSA reserves the right to modify this privacy statement at any time. If you have any questions or suggestions regarding our privacy policy, please contact us at (632) 4626600 loc 823 or at info@psa.gov.ph. You may also contact our Data Protection Officer:
ATTY. ELIEZER P. AMBATALI
Data Protection Officer (DPO)
22nd Floor, PSA Headquarters, PSA Complex
East Avenue, Quezon City, 1101
Telephone: (632) 8938-5273
Email: dpo@psa.gov.ph