In compliance with the Republic Act (RA) No. 10173, known as Data Privacy Act of 2012, the Agricultural Credit Policy Council (ACPC) conducted a seminar-workshop on the Privacy Impact Assessment (PIA) and Privacy Management Program (PMP) on October 21 and 28, 2019, respectively, at the Development Academy of the Philippines (DAP), Pasig City.
The seminar-workshop aimed to embed knowledge and capacitate the ACPC officers and staff on the PIA processes as well as the PMP control framework. Through the PIA process, the impacts on personal data privacy of ACPC’s programs, projects, processes, measures, systems, and technology products will be evaluated and managed to address risks through control framework. The PMP on the other hand, will help ACPC toward intensive protection of data privacy rights of individuals as part of ACPC’s governance responsibilities.
“Implementing these processes and controls in compliance with the law demonstrates the ACPC’s pledge to protect the personal information of our farmer and fisherfolk beneficiaries as well as our employees and stakeholders,” said Dir. Norman William S. Kraft, ACPC’s Data Protection Officer, in his message during the activity.
Mr. Bonifacio Talampas served as the resource person of the activity. He emphasized that the Data Privacy Act assures free flow of information to promote innovation and growth while protecting the users’ fundamental rights to privacy; regulates the collection, recording, organization, storage, updating or modification, retrieval, consultation, use, consolidation, blocking, erasure or destruction of personal data; and ensures that the country complies with international standards set for data protection through National Privacy Commission (NPC).
Under the law, the ACPC shall implement measures to safeguard and protect the personal data of clients particularly the farmer and fisherfolk beneficiaries of the ACPC’s credit programs.
It will likewise observe the general principles of transparency, legitimate purpose and proportionality in the collection, processing, securing, retention and disposal of personal data.