Category: Data Privacy Compliance & Corporate Security

Subcategory: Sensitive Personal Information (SPI), DPA Compliance & Data Safeguards

🔒 How Businesses Should Handle Sensitive Personal Information

Safeguard Sensitive Personal & Health Data, Maintain DPA Compliance, and Protect Business Databases from Leaks

Date: 📅 February 15, 2027 (Monday)

Time: ⏰ 4:00 PM – 5:00 PM (Asia/Manila)

Location: 📍 Live via Google Meet

💡 Is Your Business Storing Sensitive Personal Information (SPI) Without High-Level Encryption and Legal Safeguards?

Handling Sensitive Personal Information (SPI)—such as government IDs, health records, biometric data, tax numbers, and financial details—carries far stricter statutory requirements than standard personal data under the Data Privacy Act (DPA RA 10173). Improper storage, unencrypted file transfers, or unauthorized internal access to SPI can result in severe criminal liability, statutory fines, and destroyed corporate trust.

What if you could audit your company’s data processing—establishing bulletproof encryption, strict access controls, and compliance protocols for SPI?

Are you struggling to protect sensitive personal information legally and technically?

• ❌ Confusing General Personal Data with SPI: Treating sensitive medical, tax, or government ID records like basic contact info

• ❌ Storing SPI in Unencrypted Format: Keeping employee or customer IDs and health files in plain text cloud folders

• ❌ Over-Privileged Employee Access: Allowing unauthorized staff members to access restricted sensitive databases

• ❌ Lacking Explicit Consent Frameworks: Capturing sensitive personal data without legally compliant consent forms

The Goal: Equip Data Protection Officers (DPOs), HR managers, compliance officers, IT security leads, business founders, and database administrators with SPI compliance setups, encryption protocols, and access control matrices.

🔥 What You’ll Learn

• Defining Sensitive Personal Information (SPI) Under Data Privacy Laws

  Identifying specific SPI categories (health, genetics, biometrics, government identifiers, tax/financial records, legal proceedings)

• Mandatory Technical & Physical Safeguards for SPI

  Configuring AES-256 database column encryption, secure SSL/TLS transmission pipelines, and locked physical storage

• Structuring Legally Compliant SPI Explicit Consent Forms

  Designing clear, separate consent disclaimers for capturing sensitive health, HR, or financial data

• Role-Based Access Control (RBAC) & Least Privilege Enforcement

  Restricting database permissions so staff members access strictly necessary SPI required for immediate processing tasks

• Managing SPI Data Breaches & Mandatory NPC Notification

  Executing 72-hour regulatory reporting workflows and notification protocols in the event of an SPI security incident

• Auditing Third-Party Data Processors & Vendor Compliance

  Executing Data Processing Agreements (DPAs) with cloud storage, HRIS, and payment vendors handling company SPI

🎯 Who Should Attend?

• ✔ Data Protection Officers (DPOs) & Compliance Directors auditing enterprise data processing for DPA (RA 10173) compliance

• ✔ HR Directors & Healthcare IT Leads managing employee medical records, government IDs, and payroll data securely

• ✔ Database Administrators & Software Engineers building secure database encryption and access control permissions

• ✔ Corporate Lawyers & In-House Legal Counsels drafting compliant privacy notices, consent forms, and vendor DPAs

• ✔ MSME Business Owners & Operations Leads protecting customer financial and personal identity records from internal leaks

🎟️ Ticket Tiers

🎓 Special Discounts Verification

To claim the 50% discount rates above, eligible participants must submit verification using the corresponding scholarship/discount application links:

👴 Senior Citizens: https://roc.ph/scholarships/seniorcitizen/

🎓 Students: https://roc.ph/scholarships/student/

♿ PWD: https://roc.ph/scholarships/pwd/

⚠️ Note: Limited slots available to ensure an interactive Q&A session. Reserve yours early!

📌 Secure Your Slot Now

🔗 Register Here: https://roc.ph/event/how-businesses-should-handle-sensitive-personal-information-2/

Missed the live event? Avail our Online Full Access (e-recording & e-certificate) at: https://roc.ph/service/how-businesses-should-handle-sensitive-personal-information-2

💬 “Sensitive data demands superior security. Encrypt SPI, enforce strict access control, and protect customer trust.”

• Upcoming Webinars: roc.ph/webinars

• Recorded Webinars: https://www.roc.ph/courses

• Webinar Policy: roc.ph/policy/webinar/

• Privacy Policy: https://roc.ph/policy/privacy/