As the campaign period is now in full swing, the National Privacy Commission (NPC) has reminded poll candidates, including political parties, partylist groups or organizations, and their nominees, to adhere to the Data Privacy Act (DPA) of 2012 when collecting voter data.

The NPC, in a statement on Tuesday, said collection of personal data in connection with electoral campaigns must strictly adhere to the DPA, its Implementing Rules and Regulations and relevant NPC issuances.

Under NPC Advisory No. 2021–03, the processing of personal data for election campaign purposes must adhere to the general data privacy principles of transparency, legitimate purpose and proportionality.

“This means that individuals must be (clearly) informed of the purpose of data collection, and the amount of information gathered must be limited to what is necessary. The processing of personal information must always be based on a lawful basis, such as valid and freely given consent,” the NPC said.

Further, political organizations and candidates must implement appropriate organizational, physical and technical security measures to protect the personal information they collect.

“They are also accountable for ensuring that all personal data are processed fairly and lawfully. We also urge the public to exercise caution when giving out personal information,” it said.