DATA PRIVACY NOTICE


A. OUR SERVICES
The Department of Health – Metro Manila Center for Health Development (DOH-MMCHD) is committed to delivering public health services, regulatory functions, and administrative support in Metro Manila.


This Privacy Notice outlines our obligations and practices in collecting, using, storing, and protecting Personal Information in compliance with Republic Act No. 10173, its Implementing Rules and Regulations, and issuances of the National Privacy Commission (collectively, the “Privacy Laws”).

This Notice applies to all Personal Information collected from clients, stakeholders, employees, partners, and individuals who transact with DOH-MMCHD through our programs, services, systems, and communication channels.

B. YOUR PERSONAL INFORMATION UNDER THIS NOTICE
Under the DPA, “Personal Information” refers to any information, whether recorded or not, from which your identity is apparent or can be reasonably and directly ascertained. This may include, but is not limited to:
i. Name, address, email address, and contact numbers;
ii. Employment or professional information;
iii. Educational background; and
iv. Transaction or service-related information.

“Sensitive Personal Information” includes:
i. Information on race, ethnicity, marital status, age, and religious or political affiliations;
ii. Information on health, education, or any legal proceedings;
iii. Government-issued identifiers (e.g., PhilHealth, SSS, GSIS, TIN); and
iv. Other information classified by law.

DOH-MMCHD collects only the information necessary and relevant to the performance of its mandate.

C. HOW AND WHEN WE COLLECT YOUR PERSONAL INFORMATION
We collect Personal Information through lawful and fair means, including:
i. Accomplished forms (manual or online) for services, programs, or requests;
ii. Official correspondence (letters, emails, phone calls);
iii. Participation in meetings, trainings, consultations, and public health activities;
iv. Submission of documents in compliance with regulatory or administrative requirements; and
v. Information provided by other government agencies or authorized third parties.

Most of the information we collect is directly provided by you.

D. WHY WE COLLECT YOUR PERSONAL INFORMATION
We collect and process Personal Information for the following purposes:
i. Delivery of public health programs, regulatory services, and administrative functions;
ii. Processing of requests, complaints, and public assistance concerns;
iii. Monitoring, evaluation, and reporting of programs and services;
iv. Compliance with legal and regulatory requirements;
v. Coordination with government agencies, partners, and stakeholders; and
vi. Improvement of service delivery, including training, research, and policy development.
We may also process your information for purposes compatible with those stated above or as allowed by law.

E. USE AND PROCESSING OF PERSONAL INFORMATION
Your Personal Information may be processed in the following contexts:
i. Service Delivery and Public Assistance: To act on inquiries, complaints, and requests submitted to DOH-MMCHD.
ii. Regulatory and Administrative Functions: To evaluate compliance, process permits, certifications, and other official transactions.
iii. Program Implementation and Monitoring: To support public health initiatives, data analysis, and reporting.
iv. Legal Obligations: To comply with applicable laws, regulations, and lawful orders from authorities.
v. Internal Operations: For planning, auditing, quality improvement, and capacity-building activities.
vi. Information Campaigns: To disseminate advisories, public health information, and official announcements.

F. OTHER USES AND DISCLOSURES
Outside of the purposes stated above, other uses and disclosures of your Personal Information will be made only with your express authorization, unless otherwise permitted or required by law.
We may use or disclose your Personal Information without your consent in the following circumstances:
i. As required by law or lawful order: We may disclose your Personal Information to comply with applicable laws, regulations, or legal processes, including lawful orders from courts, tribunals, or government authorities.
ii. For public health and safety purposes: Your Personal Information may be used or disclosed when necessary to prevent or control risks to public health and safety, consistent with the mandate of the Department of Health.
iii. For coordination with government agencies and authorized entities: We may share your Personal Information with other government offices, partners, or authorized entities when necessary for the delivery of public services, implementation of programs, or fulfillment of official functions. In all instances, such use or disclosure shall be limited to what is necessary and proportionate to achieve the intended purpose, and appropriate safeguards shall be in place to protect your Personal Information.

G. WHO HAS ACCESS TO YOUR PERSONAL INFORMATION
Access to Personal Information is limited to:
i. Authorized DOH-MMCHD personnel and officials
ii. Partner government agencies and authorized stakeholders
iii. Service providers engaged under lawful agreements, subject to confidentiality obligations
All persons with access are required to uphold confidentiality and data protection standards.

H. YOUR RIGHTS AS A DATA SUBJECT
In accordance with Republic Act No. 10173, you are entitled to the following rights as a data subject:
i. Right to be Informed – You have the right to be informed whether Personal Information pertaining to you is being processed, including the purpose, scope, and method of such processing.
ii. Right to Access – You may request access to your Personal Information and obtain a copy thereof, subject to applicable laws and regulations.
iii. Right to Rectification – You have the right to dispute and have corrected any inaccuracy or error in your Personal Information, and to have incomplete data completed.
iv. Right to Object – You may object to the processing of your Personal Information, including processing for direct marketing, automated processing, or profiling, where applicable.
v. Right to Withdraw Consent – You may withdraw your consent to the processing of your Personal Information at any time, subject to legal and contractual limitations.
vi. Right to Lodge a Complaint – You have the right to file a complaint with the National Privacy Commission if you believe that your data privacy rights have been violated.

DOH-MMCHD will take appropriate steps to ensure that your rights are respected and upheld, in accordance with applicable laws and regulations.

I. Our Commitment to Data Protection
The Department of Health – Metro Manila Center for Health Development (DOH-MMCHD) is committed to ensuring that all Personal Information under its custody is protected in accordance with Republic Act No. 10173 and related issuances of the National Privacy Commission.
In line with this, DOH-MMCHD adheres to the following data privacy principles:
i. Transparency – We ensure that data subjects are properly informed of how their Personal Information is collected, used, stored, and disclosed. This includes clearly communicating the purpose of processing, the scope and method of data handling, the risks involved, and the rights available to data subjects, as well as how these rights may be exercised.
ii. Legitimate Purpose – We process Personal Information only for lawful, specific, and declared purposes that are consistent with our mandate as a government agency. Such processing shall not be contrary to law, morals, or public policy, and shall be limited to purposes that are necessary for the delivery of our services and functions.
iii. Proportionality – We ensure that the collection and processing of Personal Information are adequate, relevant, suitable, and not excessive in relation to the declared purpose. Only the minimum amount of data necessary to accomplish the intended purpose shall be collected and retained.
DOH-MMCHD implements appropriate organizational, physical, and technical security measures to safeguard Personal Information against unauthorized access, disclosure, alteration, or destruction, and ensures that all personnel handling such information are bound by strict confidentiality and data protection obligations.

J. Retention and Disposal
Personal Information is retained only for as long as necessary to fulfill its purpose or as required by applicable laws and regulations.
When no longer needed, data is securely disposed of to prevent unauthorized access or disclosure.
K. Accessing and Updating Your Information
You may access your Personal Information and to update and/or correct it, subject to certain exceptions. If you wish to access the same, please contact us in writing and we will respond within a reasonable time. Please take note that our ability to respond to your request may also depend on the circumstances regarding our collection of your Personal Information. We will not charge any fee for your access request, but may charge a reasonable administrative fee for providing a copy of your Personal Information. We may be restricted by law or regulations from giving you access to your personal information.


L. Changes to this Privacy Notice
DOH-MMCHD reserves the right to update this Privacy Notice to reflect changes in laws, regulations, or operational requirements. Any significant changes will be communicated accordingly.