PRIVACY NOTICE Online Medical Assistance Program (MAP) Application

This notice explains how the Philippine Charity Sweepstakes Office handles the personal data you submit through this application. Our full Privacy Notice, which contains more detail, is available at www.pcso.gov.ph/About/PrivacyPolicy/PrivacyNotice.aspx and should be read together with this page.

What we collect.Your name, date of birth, age, sex, address and contact details; your civil status; your PhilHealth number and other government-issued identifiers; the identification documents, photographs and signatures you upload; the medical abstract, prescriptions, billing statements and treatment records supporting your request; your socio-economic and financial information; and information about your family members and dependents where relevant to your application. We also collect your account registration details and technical information about your use of this application.

Why, and on what basis.We use this data to assess and decide your application, to verify your identity and eligibility, to issue a guarantee letter or make payment on your behalf, and to meet our audit and reporting obligations. We do so under Republic Act No. 1169, as amended, and Sections 12(b), 12(c), 12(e) and 13(b) of the Data Privacy Act.

How it is stored.Your data is held on PCSO systems and with our cloud service provider, with access limited to authorized personnel. Paper records are kept in locked storage at the office handling your application.

Who else sees it.The hospital, clinic, laboratory, pharmacy or supplier named in your application, so that we can pay them; the Commission on Audit, for the audit of public funds; and our cloud and IT service providers, who process data on our instructions only. We do not sell your data.

How long we keep it.Records of assistance granted are kept for one (1) year, and digital copies for one (1) year, under our records disposition schedule approved by the National Archives of the Philippines and the audit requirements of the Commission on Audit. Where no other period applies, we keep data for two (2) years after acting on your request.

How we dispose of it.When the retention period ends, we dispose of personal data securely, in a way that prevents it from being retrieved, reconstructed or accessed by anyone.

Paper records are disposed in compliance with the required procedure of the National Archives of the Philippines. All digital records stored in the database or other digital storage media shall be retained only for as long as necessary and proportionate to the purpose for which they were collected, or while the relevant program or activity remains active, unless otherwise required by law or provided under the prevailing Privacy Policy of the RDS.

Risks, and what we do about them.The main risks to your data are unauthorized access, cyberattack, loss or damage to records, and error in handling. We address these through role-based access controls, encrypted transmission, firewalls and anti-virus protection, vulnerability testing of this application, locked physical storage, backups, and documented procedures with trained personnel. If a breach occurs that puts your sensitive information at real risk of serious harm, we will notify you and the National Privacy Commission within seventy-two hours of knowing about it.

Your rights, and how to use them. You may ask to be informed about, and to access, correct, object to, or erase or block your personal data; to obtain an electronic copy where we hold it in a structured format; to claim damages for unlawful processing; and to complain to the National Privacy Commission. Some rights are limited where we must process or keep your data by law. To exercise a right, write to our Data Protection Officer at dpo@pcso.gov.ph or call at (02) 8706-4628. We will ask for proof of identity and will respond within working days.

Contact. PCSO Data Protection Officer: dpo@pcso.gov.ph; (02) 8706-4628.
National Privacy Commission: www.privacy.gov.ph.