Businesses should not be keeping sensitive information from contact tracing forms beyond 30 days, the National Privacy Commission (NPC) said.
NPC Commissioner Raymund Liboro told One News’ Agenda that contact tracing forms should be discarded frequently while databases made by businesses for a similar purpose should be cleared after a month.
“Meron po silang kaakibat na obligasyon at responsibilidad na i-secure po ‘yan. Ang ating mantra nga diyan is collect what is necessary but disclose only to proper authority at meron nang guidelines ang DOH, together with NPC,” Liboro told newsman Cito Beltran.
“‘Yung retention limit hanggang kailan ba ito kailangan hawakan? It is 30 days,” he added. “Beyond that, wala ka nang purpose dahil kung contact alam na alam na natin iyan ang development ng virus, ilang araw… Kapag wala na pong purpose dapat po iyan dini-dispose.”
The NPC recently warned the public against spam messages that were believed to have been sent to mobile service subscribers based on data gleaned from contact tracing forms.