1. Purpose

This Privacy Policy outlines how the Barangay Information System (BIS) collects, uses, stores, shares, and protects personal information in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations (IRR).
Our goal is to ensure that personal data handled by the Barangay are managed responsibly, securely, and transparently.

2. Scope

This policy applies to all personal data collected and processed by the BIS, including data of:

• Barangay residents;
• Barangay officials and employees;
• Visitors, applicants, or entities transacting with the barangay;
• Beneficiaries of barangay programs and services.

3. Personal Data Collected

The Barangay Information System may collect the following categories of personal data:

• Basic Information: Full name, date of birth, age, sex, marital status, and nationality.
• Contact Details: Address, phone number, email address.
• Identification Details: Government-issued IDs, photo, signature, biometrics (if applicable).
• Socioeconomic Information: Employment, education, household details, and income bracket (if required for social programs).
• Records and Transactions: Certificates, clearances, complaints, or assistance availed from the barangay.

4. Purpose of Data Collection

Personal data are collected and processed to:

• Deliver barangay services (e.g., clearances, certifications, assistance programs);
• Maintain an accurate resident database;
• Support community development planning and disaster risk management;
• Facilitate local governance, law enforcement, and emergency response;
• Comply with legal and regulatory obligations.

5. Data Processing and Access

Personal data shall be processed only by authorized personnel for legitimate barangay functions.
 Access to the Barangay Information System is restricted to:

• Barangay officials and staff with assigned data-handling roles;
• Authorized representatives from higher government agencies (when required by law);
• Service providers performing technical maintenance under data-sharing agreements.

All access shall be logged and monitored.

6. Data Sharing and Disclosure

The barangay may share personal data only under the following conditions:

• With consent of the data subject;
• For legal and regulatory compliance with national or local government agencies;
• In cases of public health, safety, or security concerns;
• For statistical or research purposes, provided the data is anonymized.

No personal data shall be sold or disclosed for commercial purposes.

7. Data Storage and Retention

• Personal data shall be stored securely in physical and/or electronic form.
• Access controls, encryption, and password protections shall be implemented.
• Records shall be retained only for as long as necessary to fulfill their purpose or as required by law.
• When no longer needed, data shall be securely disposed of or anonymized.

8. Data Subject Rights

Residents and data subjects have the right to:

1. Be informed – about how their data are collected and processed;
2. Access – their personal data held by the barangay;
3. Rectify – any incorrect or outdated data;
4. Object – to unlawful data processing;
5. Erasure or Blocking – of data no longer necessary;
6. Data Portability – where applicable;
7. File a complaint – with the National Privacy Commission (NPC) if their data privacy rights are violated.

Requests may be filed at the Barangay Hall or through the Barangay Data Protection Officer (DPO).

9. Data Protection Measures

The barangay implements administrative, physical, and technical safeguards, including:

• Role-based user access controls;
• Regular password updates and encryption of sensitive data;
• Secured filing and storage facilities;
• Staff training on data privacy and information security;
• Regular system audits and back-ups.

10. Data Breach Notification

In the event of a personal data breach that may pose a risk to individuals, the barangay shall:

• Notify affected data subjects and the National Privacy Commission (NPC) within seventy-two (72) hours;
• Investigate and contain the breach;
• Implement corrective measures to prevent recurrence.

11. Contact Information

Data Protection Officer (DPO)
Barangay: [Insert Barangay Name]
Address: [Insert Address]
Email: [Insert Email Address]
Contact No.: [Insert Phone Number]

12. Policy Review and Updates

This Privacy Policy shall be reviewed periodically and updated as necessary to comply with new laws, regulations, and technologies. Any changes will be communicated through public posting at the Barangay Hall and official online platforms.