Question

The Data Privacy Act of 2012, also known as R.A. No. 10173, is a fundamental law in the Philippines that aims to protect the privacy rights of individuals and regulate the collection, processing, and disclosure of personal information. Under Section 3 of the law, it distinguishes between personal and sensitive personal information.

Based on the provisions of the Data Privacy Act of 2012, answer the following practical questions regarding personal and sensitive personal information:

1. Can an email address be considered personal information or sensitive personal information? Explain your answer.
2. Under what circumstances can personal information be considered sensitive and therefore subject to additional protection under the law? Provide at least three examples.
3. In handling personal information, what are the responsibilities of an organization or entity in terms of ensuring its security and confidentiality?
4. What are the rights of individuals in relation to their personal information as provided by the Data Privacy Act of 2012? Discuss at least three rights.
5. Can an individual request the correction or deletion of their personal information held by an organization? If so, what are the procedures and requirements for making such a request?