EDPC Form
EDPC Form
Pursuant to the Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations (IRR) effective
September 2016, I _______________________________________, hereby authorize Philippine Business Bank
(“PBB” or “the Bank”) to:
1. USE and ACCESS the personal information (or “sensitive personal information”) it has collected in processing my
job application, during and until the end of my employment, such as but not limited to name, face/photo,
fingerprints or handwriting, previous employment information, date of birth, place of birth, gender, nationality, civil
status, permanent & present address/es, contact number (mobile and land phone), email address, TIN, SSS/GSIS, Phil
Health Number, License Number and Passport Numbers, even pictures, videos and other recorded media that were and
will be taken within the bank and company premises during meeting, official business, bank-related activities like
parties, marketing and training events, and other sensitive personal information (SPI) specified under Sec.3(l)
Definition of Terms, under The General Provisions.
2. STORE and RETAIN the above-mentioned Sensitive Personal Information in paper or electronic format in the
Bank’s HRIS or database, inclusive of the data processing systems owned and managed by the Bank’s accredited
Vendor or Service Provider/s like HMO, Insurance, Payroll Bank and others, and repository/storage facilities for a
period of 5 years or more relative to the Bank’s existing retention schedule. Corollary, the Bank shall responsibly
DELETE, DISPOSE OF and DESTROY my Sensitive Personal Information to the extent provided by the relevant
retention policy.
3. Further, I am assured that the Bank will only SHARE and DISCLOSE said information in the furtherance of its
business relative to my employment and/or as part of compliance to policies & regulations and applicable existing
laws. Hence, the Bank shall exercise efficient protection measures and will ensure control access by authorized
personnel/officers to preserve the confidentiality, availability and integrity of my personal sensitive data and
information (paper/electronic/recorded) under the requirements of Sec. 21. Principle of Accountability.
4. Finally, I acknowledge that I am made aware of my rights to be informed, to object, to access, to erasure or
blocking, to file damages and the right to data portability and transfer as defined in Sec.16. Rights of the Data
Subject..
dpo_edpc01-.22N18