Data Privacy Policy

The Office for Alternative Dispute Resolution (OADR), an attached agency of the Department of Justice, values your privacy and commits to protecting your personal data in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations (IRR), and related issuances of the National Privacy Commission (NPC).

This Privacy Policy explains how the ACS collects, uses, stores, and protects your information when you access or use the system.

 

1. Information We Collect
   1. Personal Information
      • Full name
      • Contact number
      • Email address
      • Home and office address
      • Educational background
      • Other identifiable information necessary for verification
   2. Professional Information
      • Training and educational qualifications
      • ADR practice and experience
      • Employment information
      • Accreditation and certification history
      • Uploaded documents and credentials supporting your application
   3. System-Generated Data
      • Log files
      • IP address
      • Browser type and device information
      • Date and time of access
      • These are gathered for system security, auditing, and analytics.
2. Purpose of Data Collection
   OADR collects and processes your information for the following legitimate and authorized purposes:
   
   2.1 Evaluation and processing of accreditation and certification applications
   2.2 Monitoring, compliance verification, and enforcement of OADR standards
   2.3 Inclusion in OADR's pool of potential resource persons for training, capacity-building, or promotional activities
   2.4 Assessment for possible appointment as third-party neutrals
   2.5 Responding to public requests for lists of accredited practitioners based on specified criteria
   2.6 Issuance of official communications, notices, receipts, certifications, and system alerts
   2.7 System improvement, analytics, reporting, and audit functions
   
   Processing activities shall always be consistent with OADR's mandate and applicable laws.
   
   
3. Data Sharing and Disclosure
   Your personal data may be shared only with authorized entities, including:
   
   3.1 Authorized OADR personnel involved in accreditation, certification, compliance monitoring, training, promotions, policy development, and recommendations for appointments of third-party neutrals.
   3.2 Partner government agencies, when required by law, regulation, or formal data-sharing agreements.
   3.3 Third-party system developers, or service providers engaged for ACS development, hosting, maintenance, or security, are subject to strict confidentiality and data protection obligations.
   
   The OADR shall not disclose personal information to unauthorized entities.
   
   
4. Data Retention and Disposal
   4.1 Personal data shall be retained only for as long as necessary to fulfill the purposes for which it was collected or as required by applicable laws, regulations, and institutional policies.
   4.2 Records relating to accreditation, certification, and other information of enduring administrative, legal, or historical value may be retained permanently for documentation, verification, or archival purposes.
   4.3 All stored information shall be protected against unauthorized access, alteration, or disclosure.
   
   Data that no longer have operational, legal, or historical value shall be securely disposed of or anonymized in accordance with OADR's data retention and disposal policy.
   
   
5. Data Protection and Security
   The OADR implements appropriate organizational, physical, and technical security measures to safeguard personal data, including:
   
   5.1 Secure servers, encryption, and protected communications
   5.2 User authentication, role-based access controls, and security protocols
   5.3 Regular system monitoring, vulnerability assessments, and audit logs
   
   These measures are designed to maintain the confidentiality, integrity, and availability of your data.
   
   
6. Your Rights as a Data Subject
   In accordance with the Data Privacy Act, you are entitled to the following rights:
   
   6.1 Right to be informed how your personal data is collected and processed
   6.2 Right to access your personal information
   6.3 Right to rectification or correction of inaccurate or incomplete data
   6.4 Right to erasure or blocking
   6.5 Right to object or withdraw consent to processing, subject to legal and administrative requirements
   6.6 File a complaint before the National Privacy Commission if you believe your data privacy rights have been violated.
   6.7 Right to data portability, where applicable
   6.8 Right to file a complaint with the National Privacy Commission if you believe your rights have been violated
   
   Requests concerning access, correction, or withdrawal of consent may be submitted to the OADR Data Protection Officer.
   
   
7. Policy Updates
   The OADR reserves the right to revise or update this Privacy Policy to reflect changes in legal requirements, system enhancements, or best practices in data protection. Any updates will be published or announced through the ACS platform.
   
   
8. Contact Information
   For concerns regarding data privacy, you may reach:
   
   Atty. Lorna A. Tungpalan-Lugod, LLM, MAT, LPT, REB | Data Protection Officer
   Office for Alternative Dispute Resolution (OADR)
   dpo@oadr.doj.gov.ph | 531-04717