In carrying out its mandate under Republic Act (RA) No. 7875, as amended by RAs 9241 and 10606, which relates to the administration of the National Health Insurance Program (NHIP), the Philippine Health Insurance Corporation ("PhilHealth" or "We") collects and processes personal data, including those sourced from its official website.
As a responsible data custodian, PhilHealth commits to keep personal data secure from unlawful or unauthorized processing, in line with RA 10173, also known as the Data Privacy Act of 2012 (DPA), and the fundamental right to privacy of every individual.
This Privacy Notice defines how we manage information we collect or generate through our official website and linked online services. Since this website also contains links to other websites, visitors are advised to read the privacy notices or privacy policies of those sites, which are separate and distinct from ours.
Collection is primarily carried out through linked web applications found in My PhilHealth Portal under Online Services. These applications may record personal data including, but not limited to:
We also use cookies to help maintain and improve the website and enhance user experience. When you visit our website, the following information may also be recorded through Google Analytics:
Personal data collected through linked web applications are used for any or all of the following purposes:
Data gathered and processed by Google Analytics are used to generate reports on the following:
PhilHealth has evolving controls and security policies in place to maintain the confidentiality, integrity, and availability of the personal data it collects. Information collected by domains maintained by PhilHealth is stored in data centers accessible only to authorized personnel, including third-party service providers.
Personal data collected through linked web applications are not disclosed to external parties unless required or permitted by law.
Except when otherwise required or permitted by law, collected data are kept only as long as necessary to achieve the purposes declared in this notice. Afterward, they are deleted or disposed of in a safe and secure manner.
Individuals whose personal data we collect are accorded rights by the DPA as data subjects. They may invoke such rights at any time, in accordance with the provisions of the law. If there are inaccuracies in their records that need to be corrected or updated, members must notify PhilHealth immediately through any Local Health Insurance Office or Branch.
This Privacy Notice was issued on January 16, 2019 and will remain effective unless revised. Revisions become effective immediately after being posted on this site. PhilHealth will make every effort to announce to the public any changes made to this Notice.
If you have feedback, questions, complaints, or other concerns regarding this Privacy Notice or PhilHealth's data processing operations, you may contact the Data Protection Officer using the information below:
In carrying out its mandate under RA No. 7875, as amended by RAs 9241 and 10606, PhilHealth collects and processes personal data in a manner consistent with the DPA.
PhilHealth commits to secure and keep confidential all collected data. It also aims to uphold the fundamental right to privacy of all individuals the data pertains to, especially PhilHealth members, dependents, and health care professionals.
We collect data necessary to fulfill our functions and activities relative to the implementation of the NHIP when you:
These include, but are not limited to, a member's name, age, sex, date of birth, email address, contact details, health information, employment details, government-issued ID numbers, signature, and details about dependents such as spouse, children, and parents. Additional information is collected from health care professionals in relation to residency training and medical affiliations. CCTV footage of PhilHealth personnel and visitors is also recorded within office premises.
You may visit https://www.philhealth.gov.ph/privacy/ to read the Privacy Notice specific to our website.
In accordance with our mandate to implement the NHIP, we may use and process collected personal data for any or all of the following purposes:
We will not subject your personal data to any automated decision-making process without your prior consent or authority granted by law.
We have established necessary and appropriate physical, technical, and organizational security measures to protect the personal data we collect and process. These safeguards are regularly reviewed and updated to ensure that they remain aligned with international and industry standards. Access to your personal data is limited to authorized PhilHealth personnel and, on occasion, third-party service providers who are required to implement security measures similar to or better than our own.
To the extent permitted or required by law, we may share or disclose personal data to other persons or organizations to uphold your interests and pursue ours when administering the NHIP. We may share personal data for reasons including:
As a general rule, we dispose of or delete collected data in accordance with the period prescribed by applicable laws or PhilHealth policy. Sometimes, relevant personal data are retained for historical and statistical purposes.
Individuals whose personal data we collect are accorded rights by the DPA as data subjects. They may invoke such rights at any time, in accordance with the provisions of the law. If there are inaccuracies in their records that need to be corrected or updated, members must notify PhilHealth immediately through any Local Health Insurance Office or Branch.
This Privacy Notice became effective on March 29, 2019 until subsequently amended. Revisions become effective immediately after being posted in areas visible to applicants and members, including PhilHealth's website. PhilHealth shall also avail of other opportunities to communicate such changes.
If you have feedback, questions, complaints, or other concerns regarding this Privacy Notice or PhilHealth's data processing operations, you may contact the Data Protection Officer using the information below:
In carrying out its mandate under RA No. 7875, as amended by RAs 9241 and 10606, PhilHealth collects and processes personal data in a manner consistent with the DPA.
PhilHealth commits to secure and keep confidential all collected data. It also aims to uphold the fundamental right to privacy of all individuals the data pertains to, especially suppliers and consultants, as applicable.
We collect, acquire, or generate personal data in many forms. They may consist of written records, photographic and video images, and digital material. Examples include:
If you supply us with personal data of other individuals, such as a person to contact in the event of an emergency, we will request you to certify that you have obtained the consent of such individuals before providing us with their personal data.
To the extent permitted or required by law, we use your personal data to pursue our legitimate interests as a health insurance corporation, employer, and/or contracting party, including administrative, research, historical, and statistical purposes. We may use the information we collect for purposes such as:
We will not subject your personal data to any automated decision-making process without your prior consent or authority granted by law.
We have established necessary and appropriate physical, technical, and organizational security measures to protect the personal data we collect and process. These safeguards are regularly reviewed and updated to ensure that they remain aligned with international and industry standards. Access to your personal data is limited to authorized PhilHealth personnel and, on occasion, third-party service providers who are required to implement security measures similar to or better than our own.
To the extent permitted or required by law, we may share or disclose personal data to other persons or organizations to uphold your interests and pursue ours when administering the NHIP. We may share personal data for reasons including:
As a general rule, we dispose of or delete collected data in accordance with the period prescribed by applicable laws or PhilHealth policy.
Individuals whose personal data we collect are accorded rights by the DPA as data subjects. They may invoke such rights at any time, in accordance with the provisions of the law.
This Privacy Notice became effective beginning March 29, 2019 until subsequently amended. Revisions become effective immediately after being posted in areas visible to suppliers, including PhilHealth's website. PhilHealth shall also avail of other opportunities to communicate such changes.
If you have feedback, questions, complaints, or other concerns regarding this Privacy Notice or PhilHealth's data processing operations, you may contact the Data Protection Officer using the information below:
In carrying out its mandate under RA No. 7875, as amended by RAs 9241 and 10606, PhilHealth collects and processes personal data in a manner consistent with the DPA.
PhilHealth commits to secure and keep confidential all collected data. It also aims to uphold the fundamental right to privacy of all individuals, especially applicants and employees.
We collect personal data when you signify your interest to apply for any vacant position in the Corporation, during your employment, and before separation from service.
We collect personal data including, but not limited to, an applicant's or employee's name, age, sex, date of birth, email address, contact details, government-issued ID numbers, signature, family background, educational background, work experience, voluntary work or involvement in civic, non-government, or training programs, learning and development interventions, character references, and medical records.
If you supply us with personal data of other individuals, such as a person to contact in the event of an emergency, we will request you to certify that you have obtained the consent of such individuals before providing us with their personal data. Applicant data are collected to process applications for employment and shall be retained by the Corporation until the vacancy for the position applied for is filled.
We collect personal data from documents you submit, including, but not limited to, Personal Data Sheet, Certificate of Employment, Statement of Assets, Liabilities and Net Worth, performance scorecards, medical records, and other documents required by the Human Resources Department upon application, during employment, and before separation from service. We may also acquire pictures or videos of activities you participate in through official documentation or CCTV cameras installed within PhilHealth premises.
To the extent permitted or required by law, we use your personal data to pursue our legitimate interests as a health insurance corporation, employer, and/or contracting party, including administrative, research, historical, and statistical purposes. We may use the information we collect for purposes such as:
We will not subject your personal data to any automated decision-making process without your prior consent or authority granted by law.
We have established necessary and appropriate physical, technical, and organizational security measures to protect the personal data we collect and process. These safeguards are regularly reviewed and updated to ensure that they remain aligned with international and industry standards. Access to your personal data is limited to authorized PhilHealth employees and, on occasion, third-party service providers who are required to implement security measures, provided that a Non-Disclosure Agreement has been executed between PhilHealth and the third party.
To the extent permitted or required by law, we may share or disclose personal data to other persons or organizations to uphold your interests and pursue ours when administering the NHIP. We may share personal data for reasons including:
As a general rule, we dispose of or delete collected data in accordance with the period prescribed by the National Archives of the Philippines and PhilHealth policies.
Individuals whose personal data we collect are accorded rights by the DPA as data subjects. They may invoke such rights at any time, in accordance with the provisions of the law.
This Privacy Notice became effective beginning August 2, 2019 until subsequently amended. Revisions become effective immediately after being posted in areas visible to applicants, including PhilHealth's website. PhilHealth shall also avail of other opportunities to communicate such changes.
If you have feedback, questions, complaints, or other concerns regarding this Privacy Notice or PhilHealth's data processing operations, you may contact the Data Protection Officer using the information below:
PhilHealth is committed to protecting personal data collected through its Closed-Circuit Television (CCTV) systems in compliance with the Data Privacy Act of 2012 and NPC Circular No. 2024-02, Guidelines on CCTV Systems.
PhilHealth ensures compliance with data protection standards and implements measures to secure personal data.
The use of CCTV systems is justified under Section 12(f) of the Data Privacy Act of 2012, which allows processing of personal information for legitimate purposes related to security and organizational protection. PhilHealth specifically uses CCTV systems to:
CCTV surveillance is conducted strictly for security purposes and not for unrelated processing activities.
PhilHealth CCTV systems collect visual recordings of individuals within monitored areas, including employees, clients, visitors, and passersby. CCTV systems are configured to capture video only and do not collect audio recordings.
Surveillance is limited to common and public areas such as entrances, exits, hallways, reception areas, waiting rooms, and parking spaces.
Recorded data shall be deleted after the retention period set by applicable PhilHealth policy, unless an extended retention period is required to address ongoing security concerns or investigations.
CCTV systems capture high-definition video recordings.
As a data subject, you have the following rights under the Data Privacy Act of 2012:
These rights ensure the protection of your personal data while balancing PhilHealth's legitimate interest in using CCTV systems for security and safety purposes. To exercise your rights, submit a written request to PhilHealth's Data Protection Officer, following the procedure outlined in the Data Privacy Act of 2012 and applicable NPC Circulars.
By entering PhilHealth Regional Offices or Local Health Insurance Offices, individuals acknowledge the use of CCTV surveillance and the terms of this Privacy Notice.
For inquiries, requests, or complaints, you may contact:
If you have feedback, questions, complaints, or other concerns regarding this Privacy Notice or PhilHealth's data processing operations, you may contact the Data Protection Officer using the information below:
