Welcome to the website of the Philippine Society of Nephrology, Inc. (PSN). We are committed to protecting your personal data in compliance with the Data Privacy Act of 2012 and our internal security policies. This Privacy Notice explains how we collect, use, protect, and manage your information.

1. Information Collection and Purpose All data collection by the PSN is strictly proportional, explicit, and legitimate. We may collect your personal information through various registration points, including membership applications, patient registries, and convention attendance.

2. Data Security and Storage We implement rigorous security measures to protect your data against unauthorized access, disclosure, or alteration.

• Secure Storage: Your digital records are stored in secure, encrypted cloud repositories or access-controlled local databases.
• Strict Access Control: Access to your data is governed by Role-Based Access Control (RBAC), meaning personnel can only access data relevant to their specific roles (e.g., Secretariat personnel only access membership and financial records, while registry researchers only access anonymized clinical data).
• Authentication: We mandate Multi-Factor Authentication (MFA) for anyone accessing cloud-hosted membership lists or sensitive medical databases.
• Encrypted Transmission: Any personal or sensitive data transmitted over the internet utilizes secure, encrypted protocols (such as HTTPS or SFTP).

3. Data Sharing and Third Parties

• Service Providers: When outsourcing operations to third parties (like cloud hosting services or event organizers), we execute strict Data Processing Agreements (DPAs). These agreements legally bind vendors to data protection standards equal to or exceeding our own.
• Clinical Research: Any collaborative clinical research involving patient registries requires a formal Data Sharing Agreement (DSA). Furthermore, custom software developments enforce structural anonymization techniques so that clinical research metrics cannot be traced back to identifiable patients.

4. Data Retention and Disposal

• Retention: We retain your data only as long as necessary to fulfill its clinical, academic, legal, or institutional purpose. Membership data is kept for the duration of your active affiliation, while medical registry data is anonymized or pseudonymized for long-term clinical research.
• Disposal: When data is no longer needed, physical documents are destroyed via cross-cut shredding. Digital storage is permanently overwritten or securely degaussed to prevent any technical recovery of the information.

5. Your Rights as a Data Subject Under the Data Privacy Act, the PSN respects and enforces your statutory rights:

• Right to be Informed: Transparent access to how your data is handled via Privacy Notices.
• Right to Access: The right to request reasonable access to your processed personal records.
• Right to Object: The right to refuse processing, especially for secondary marketing or non-essential research.
• Right to Erasure or Blocking: The right to request removal of data upon withdrawal of consent, subject to statutory retention limits.
• Right to Rectification: The right to immediately correct inaccurate or outdated information.
• Right to Data Portability: The right to obtain a copy of your electronic data in a secure, structured format.
• Right to Damages: The right to be indemnified for any damages sustained due to inaccurate, incomplete, outdated, or unauthorized use of personal data.

6. Contact Us The PSN maintains a Data Breach Response Team (DBRT) ready to assess, contain, and mitigate any security incidents. If you have inquiries, wish to exercise any of your data privacy rights, or need to report a concern, please contact our Data Protection Officer: