Section 18Sec./Art. 18

Safeguards on the Philippine Identification System (PhilSys). - The PSA with the technical assistance of the DICT shall be implement reasonable and appropriate organizational, technical and physical security measures to ensure that the information gather for the PhilSys, including information stored in the PhilSys Registry, is protected from or unauthorized access, use, disclose, and against accidental or intentional loss, destruction, or damage. Moreover, PSA hall ensure that individuals are adequately informed upon registration for PhilSys on how their data will be used and how they can access their registered information and record history.

While upholding the confidentiality provisions under Republic Act No. 10625, otherwise known as the "Philippine Statistical Act of 2013", all data collated by the PSA under the PhilSys may be used to generate aggregate data or statistical summaries without reference to or identification of any specific individual: Provided, That nothing in this Act shall construed as prohibiting or limiting the sharing or transfer of any personal data that is already authorized or required by law.