People are concerned about their privacy, but the coronavirus disease 2019 (COVID-19) pandemic prompts people to share their personal information for contact-tracing measures whenever they go to supermarkets, malls, and other establishments.

During the Tanggol Karapatan episode on "COVID-19 and Data Privacy Rights" hosted by Radyo Veritas on Saturday, Commission on Human Rights (CHR) Commissioner Gwen Pimentel-Gana asked what the responsibility of establishment owners are in protecting the privacy of individuals who are coming and going from their stores.

Atty. Amor Venenoso from the National Privacy Commission highlighted the joint memorandum order of the Department of Health and Department of Trade and Industry (DTI), which states that the personal data collected by establishments only have a 30-day lifespan. After the time has lapsed, they should dispose of the personal data.

"The commission is actively monitoring contact-tracing measures of establishments, and even local government units (LGUs) monitor establishments. We ask them to submit documents whenever we find lapses in the contact tracing measures," she said.

Venenoso said they call out erring establishments and ask them to explain any lapses, and issue orders directing them to comply with whatever directives of the commission.

Should an individual wish to file a complaint against an establishment before the commission, Venenoso explained that there would be a process. "There would also be mediation proceedings if both parties agree to it," she said.

In the event that both parties still cannot come to an agreement after the mediation proceedings, she said that the case can be elevated to the courts.

Pimentel-Gana acknowledged Venenoso's statements, stressing that data collected by establishments need to be guided by "legitimacy, proportionality, and transparency."

"They are not at liberty to just ask any information," she said. "It depends on the situation."