DivinaLaw’s Atty. Dela Cruz Speaks on Data Privacy in Time of Pandemic

Name: DivinaLaw
Address: 8th Floor Pacific Star Bldg., Sen. Gil Puyat Ave. cor Makati Ave., Makati City 1200, Philippines, 1200, PH
Telephone: (632) 8822-0808
Price range: $$

September 7, 2021

DivinaLaw Senior Partner Atty. Enrique V. Dela Cruz served as guest speaker in a data privacy webinar held for officers, staff, and members of the City Sports Club Cebu last September 4.

In his presentation “Privacy Issues in the Time of COVID-19,” Atty. Dela Cruz discussed data privacy concerns affecting the sport club’s stakeholders specifically during the pandemic. He emphasized that as an entity collecting health information from its members, the Club is covered by the Data Privacy Act (DPA) of 2012.

Aside from the salient features of DPA, Atty. Dela Cruz talked about the Club members’ right vis-à-vis management’s prerogatives, video conferencing as part of the new normal, the effects of work-from-home on data privacy, and disclosing the identity of employees and staff who tested positive for COVID-19. He opened the floor for questions after his presentation.

Atty. Dela Cruz is the head of DivinaLaw’s Data Privacy, Arbitration, Intellectual Property & FinTech groups. He is also the Data Protection Officer of the firm.

DIVINALAW PRIVACY STATEMENT

DivinaLaw is a full service law firm that is duly organized under the laws of the Philippines, with principal office address at 8^th Floor, Pacific Star Building, Makati Avenue corner Gil Puyat, Makati, Philippines.

DivinaLaw respects your privacy and recognizes the need for appropriate measures to protect and manage your personal data. This Privacy Statement aims to assure our clients and other individuals that we are observing the appropriate level of personal data protection in compliance with the standards prescribed by Republic Act No. 10173, otherwise known as the “Data Privacy Act”.

Service Description

Our practice includes the entire spectrum of Philippine law. Our litigation practice covers corporate, criminal and civil litigation, alternative dispute resolution, estates and trusts, immigration, labor and employment, elections, administrative regulation, and maritime law. Our corporate practice includes banking, finance and construction, mergers and acquisition, foreign investments, securities, corporate rehabilitation, insurance, public-private partnerships, mining and natural resources, energy, utilities regulation, intellectual property, sports and entertainment, and taxation.

Personal Information to be Collected

The following personal information are collected from our clients:

Personal contact information which includes your name, address, email address, phone number, or any other information that would allow DivinaLaw to contact you;
Demographic information which includes your gender, date of birth, age, civil status, nationality, etc.;
Non-personal information such as those provided by your device which may include your IP address, geolocation, operating system, browser type and version, and other machine identifiers, etc.; and
Other legal and personal concerns that you referred to us for opinion, resolution, establishment of your claim, or defense of your rights.

Collection Method

Your personal information may be collected, directly or indirectly, through any of the following means:

Forms, agreements and other similar or related documents you submitted;
Use and log-in to DivinaLaw’s website when you choose to fill out a ‘Contact Us’ form;
During availment of DivinaLaw’s services;
Communications and correspondences with our lawyers, whether in writing, verbally, or thru electronic means;
Footages from our CCTV cameras; and
Personal Information may also be obtained from third parties and other sources which have obtained your prior consent for disclosure or when Divina Law is legally allowed to acquire such information.

Purpose and Use of Collected Personal Information

Your personal information is collected by DivinaLaw for the following purposes:

To perform our obligations under our engagement agreement;
To assist you in all your legal concerns;
To inform you about the activities, projects, programs of DivinaLaw; and
To comply with legal and regulatory requirements and perform such other processing that may be required under any applicable law or regulation.

In the course of performing its services and responsibilities, DivinaLaw may engage the services of third-party service providers. In doing so, certain personal information are required to be disclosed for legitimate business concerns and as may be necessary to provide you with our services. We will never share, sell or otherwise disclose your personal information to third-parties, except as otherwise stated above or unless otherwise permitted under the Data Privacy Law.

Storage and Transmission of Personal Information

Organizational, physical and technical security measures are maintained, enforced and implemented at all times to ensure the integrity, confidentiality and security of your personal information.

The security measures of DivinaLaw include, but are not limited to the following:

The processing of personal information is limited to the extent necessary to deliver the services offered and/or made available by DivinaLaw;
Our server is equipped with firewall, data encryption, anti-virus, and other appropriate security controls;
Access to personal information is restricted to authorized personnel on a need-to-know basis;
Regular audits are conducted to ensure that personal information is secured and security controls are effective;
The security systems are kept up to date; and
The personnel are regularly oriented regarding the appropriate level of data privacy protection.

Your personal information is kept in a secure facility within our office.

Method of Use

Your personal information may be used as is or further processed solely for the purpose of performing our obligations and responsibilities to our clients.

Retention Period

Your personal information will be retained by DivinaLaw until it is no longer necessary for the fulfillment of the purpose/s for which it was obtained and for an additional period of ten (10) years thereafter. After which, the data will be anonymized and utilized solely for statistical purposes.

Rights of Data Subject

In accordance with the Data Privacy Law, we shall respect and uphold your rights as data subjects. For more information about your rights, kindly refer to National Privacy Commission’s webpage at https://privacy.gov.ph/know-your-rights/.

Should you have questions or concerns about Data Privacy, you may contact our Data Protection Officer thru: dpo@divinalaw.com.

DivinaLaw hereby reserves the right to amend this Privacy Statement to comply with government and regulatory requirements, to adapt to new technologies, to align with industry practices, or for other legitimate purposes. Rest assured that you will be notified if the amendments are significant.

Date: 4 April 2018