The San Pablo Colleges Medical Center (SPCMC) aims to comply with the Data Privacy Act of 2012 (R.A. 10173) and its implementing rules and regulations. This Privacy Notice applies to personal information collected and being collected and processed by the San Pablo Colleges Medical Center.
The personal information we collect and process includes but are not limited to the following:
The SPCMC collects personal data in various sources and forms collected directly from the patient unless unreasonable or impracticable to do so. However, the personal data we have are those that you have consented to us to process and review. We collect and process your personal information through either paper based and/or electronic records. The collection of personal data shall be done as close as possible to the time and place of care by appropriately trained staff and shall obtain consent of the data subject. We collect your personal data that include those you provided us upon admission and information we acquire or generate during your course of stay in SPC Medical Center.
When you receive care and services from SPCMC, we will collect personal information about you. We collect, use and share your personal data for reasons such as delivery of healthcare, your ongoing care and services, to help us improve our care and services, arrange payment for services, to know your eligibility for benefits and services. We also collect personal information during research as permitted and as required by law (e.g. court order, reportable conditions, etc.). SPCMC shall identify the purposes for which personal data is collected in order to comply with the Data Privacy Principles of Transparency, Legitimate Purpose and Proportionality.
We store your personal data in our Hospital Information System and Filing System with applicable security measures to prevent unauthorized access. Transfer of personal data via electronic mail shall use a secure email facility. Whenever the SPCMC transfers personal data under its control to another partner, it shall execute a Data Sharing Agreement, substantially containing the terms and conditions pursuant to the Data Privacy Law. All personal data, whether virtual or physical, being processed by SPCMC shall only be accessed by Authorized Personnel.
We use your personal data with your consent only for the purpose(s) specified and declared to you. SPCMC shall take reasonable steps to ensure the information collected is relevant to the purpose, is not excessive and is accurate, up to date and complete. Collection of the information does not unreasonably intrude on the personal affairs of the individual. We allow any third party to access necessary personal information and health information of a patient in cases required by law, or when such access is authorized under a valid contract to which the patient is a party. We ensure that a third party shall not disclose health information and use appropriate safeguards to prevent use and disclosure of the health information other than as provided by contract or as required by law.
We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. We are committed to ensure the security of your personal data, reasonable and appropriate safeguards and measures have been put in place especially designed for its protection, and for the maintenance of its integrity, availability and confidentiality.
Under the DPA of 2012, you have certain rights to ensure that your personal information, with your consent, are collected, used and disclosed lawfully and guided by the data privacy principles. You may exercise your particular Right to Access, Modify and Update inaccurate Personal Information by contacting us through the information provided below.