December 8, 2022

The National Privacy Commission (NPC) has reminded all personal information controllers (PICs) to get vaccinees’ free and informed consent before using any personal information in their Covid-19 vaccination cards for promos, raffles, or discounts.

The agency recently issued NPC PHE Bulletin 20 in light of reports of collection of copies of Covid-19 vaccination cards by certain companies as a form of reward to vaccinated individuals.

Privacy Commissioner Raymund Liboro said vaccination cards contain sensitive personal information such as the vaccinee’s age, date of birth, and health information.

“While we laud these gestures as part of the ongoing initiative to encourage all eligible individuals to be vaccinated against Covid-19, we must also remind all PICs of the need to establish a lawful basis in the conduct of their respective personal data processing activities,” Liboro said.

For consent to be valid, Liboro said it must be freely given, specific, informed, and an indication of will.

“Consent must also be evidenced by written, electronic, or recorded means,” he said.

A privacy notice must be provided to sufficiently inform the vaccinees wishing to avail themselves of the promos, raffles, or discounts on the details of the processing of their personal data and their rights as data subjects, among other necessary information, for PICs to demonstrate transparency, the NPC chief said.

He also reminded the PICs the use of the vaccine card must be limited to the intended purpose of giving promos, raffles, or discounts.

Health information of the data subjects must be adequately secured.

The vaccine cards should never be posted by PICs on public platforms. Unauthorized disclosure may be punishable under the Data Privacy Act of 2012 and other applicable laws.

Copies of the vaccine cards must be retained only for as long as necessary for the fulfillment of the purpose. These must be disposed of in a secure manner.

The NPC also reminded all subjects to send a report to its information desk at [email protected] for any concerns, questions, reports, and complaints. – Press release