iRealtee OS Glossary

Sensitive Personal Information

Section 3(l) of the Data Privacy Act of 2012 defines Sensitive Personal Information as data about an individual's:

Sensitive Personal Information

Sensitive Personal Information is a protected data category under Republic Act No. 10173 (Data Privacy Act of 2012) that includes government-issued identifiers, financial records, health information, and other data requiring heightened privacy safeguards.

Definition

Section 3(l) of the Data Privacy Act of 2012 defines Sensitive Personal Information as data about an individual's:

  • Race, ethnic origin, marital status, age, color, and religious, philosophical, or political affiliations
  • Health, education, genetic or sexual life, or any proceeding for any offense committed or alleged to have been committed
  • Government-issued identifiers such as SSS numbers, TIN, PhilHealth ID, and professional licenses
  • Information classified by executive order or act of Congress

Key Components

Sensitive Personal Information under Philippine law encompasses four main categories:

  • Demographic Identifiers: Race, ethnicity, marital status, age, color, religious or political beliefs
  • Health and Personal Records: Medical history, genetic data, educational background, and sexual life
  • Government-Issued Documents: SSS number, TIN, PRC license, driver's license, passport numbers, PhilHealth records, and voter registration
  • Classified Information: Data designated as classified by Congress or executive order

How it Works

The National Privacy Commission regulates how organizations collect and process Sensitive Personal Information:

  1. Collection: Organizations must obtain explicit consent before collecting Sensitive Personal Information
  2. Processing: Data processing requires a lawful basis and must adhere to transparency, legitimate purpose, and proportionality principles
  3. Storage: Information must be secured using organizational, physical, and technical measures
  4. Breach Notification: Organizations must notify the NPC and affected individuals when Sensitive Personal Information is compromised

Pros & Cons

Advantages:

  • Protects individuals from identity theft and discrimination
  • Creates accountability for organizations handling personal data
  • Aligns Philippine regulations with international data protection standards

Disadvantages:

  • Increases compliance burden for businesses, especially smaller brokerages
  • Requires investment in data security infrastructure
  • May slow down client onboarding processes

Real-World Application

In Philippine real estate, brokers frequently encounter Sensitive Personal Information through:

  • Government IDs: PRC licenses, TIN certificates, and SSS numbers required for buyer verification
  • Financial Records: Bank statements and tax returns for loan qualification
  • KYC Requirements: Anti-money laundering compliance mandates collection of sensitive client data

Real estate brokerages must register with the National Privacy Commission as Personal Information Controllers and appoint a Data Protection Officer. Brokers handling more than 1,000 records of Sensitive Personal Information face additional security requirements under Section 24 of the DPA.

When processing property transactions, brokers collect:

  • Tax Identification Numbers for BIR compliance
  • Government-issued IDs for contract execution
  • Income documents containing financial information

Organizations violating Sensitive Personal Information processing rules face imprisonment of 3-6 years and fines between PHP 500,000 to PHP 4,000,000.

References

Looking for another term? Browse the full glossary.

Back to Glossary