Data Privacy Notice for Membership Information System – MeMIS
The National Research Council of the Philippines (NRCP), an attached agency of the Department of Science and Technology (DOST), is a collegial body of researchers, engineers, scientists, and artists. As a collegial body, the NRCP is committed to protecting the privacy and security of the personal data of the clients we serve, particularly our NRCP members.
We strictly adhere to the principles of the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations (IRR). This Data Privacy Notice outlines our procedures for collecting, processing, and protecting your personal data in accordance with the applicable provisions of the Data Privacy Act of 2012.
NRCP implements appropriate measures in accordance with its internal data governance structure, which includes the Personal Information Controller (PIC), Personal Information Processors (PIP), and the Compliance Officer for Privacy (COP) who oversee the responsible handling of personal data.
1. Types of Information We Collect
- Identity Data — full name, birthdate, sex, nationality, and civil status.
- Contact Data — home and office addresses, email address, and contact numbers.
- Professional Data — profession, research and creative works, educational attainment, employment history, and affiliations.
- Biometric Data — photograph and e-signature.
- Online and Communication Data — information from interactions with the website and official social media accounts.
- Technical Data — device/connection information including IP address, browser type/version, and operating system.
2. Mode of Collection
- Directly from you — membership applications, event registration, research proposals, forms, and direct communication.
- From the official agency website — online forms, registration portals, and online inquiries.
- From official social media accounts — direct messages, comments, and participation in online activities.
- Through publicly available sources — e.g. academic/professional networks you have voluntarily made public.
- Through internal and external coordination — with other NRCP/DOST divisions or partner institutions when necessary.
3. Purpose of Collection
- — Processing applications for membership, grants, and other NRCP services.
- — Managing and coordinating research and development programs.
- — Communicating about activities, events, and announcements.
- — Complying with legal and regulatory obligations as a government agency.
- — Maintaining internal records of members, grantees, and partners.
- — Responding to inquiries, requests, and concerns.
- — Generating statistical data/reports for analytics, planning, and policy formulation.
- — Promoting NRCP programs and members'/researchers' achievements.
- — Sharing name and basic contact information with third parties requiring expertise, where applicable.
- — Maintaining, securing, and operating NRCP systems; detecting and preventing fraud, abuse, and cybersecurity incidents.
4. Protection of Your Data
Active members' data is retained for the duration of their membership. Data from unsuccessful membership applications is retained for up to six (6) months only where there has been no activity after submission. Disposition is conducted semestrally, witnessed by representatives from the National Archives of the Philippines (NAP), the Commission on Audit (COA), and the NRCP Membership Secretariat, and carried out by authorized RIDD-MIS staff. Archived data remains under the same security controls until secure destruction.
- Organizational Measures — Access to personal data restricted to authorized NRCP personnel and officials under NDA.
- Technical Measures — Firewalls, encryption, and password-protected systems.
- Physical Measures — Physical records stored in locked cabinets and secure, access-restricted facilities.
5. Data Breach Management
NRCP shall notify the DOST DPO/CERT within twelve (12) hours upon knowledge of, or reasonable belief that, a personal data breach or security incident requiring notification has occurred.
- 01
Identification and containment of any suspected or confirmed breach.
- 02
Risk evaluation of the nature, scope, and affected data.
- 03
Internal notification to relevant NRCP units and officials.
- 04
Remediation of vulnerabilities and recovery of data where possible.
- 05
Documentation and review of all incidents to strengthen future safeguards.
6. Your Rights Under the Data Privacy Act
- — Right to be informed
- — Right to object
- — Right to access
- — Right to rectification
- — Right to erasure or blocking
- — Right to data portability
- — Right to damages
- — Right to file a complaint with the National Privacy Commission
- — Transmissibility of rights to lawful heirs and assigns
7. How to Contact Us
| Role | Contact details |
|---|---|
| NRCP Data Protection Officer | Mr. Joselito A. Carteciano, Chief Science Research Specialist, RIDD, NRCP-DOST, General Santos Avenue, Bicutan, Taguig City, 1631. nrcpinfo@nrcp.dost.gov.ph. Tel: (02) 8837-6142 / (02) 8837-6143 |
| DOST Central Office DPO | Dr. Cezar R. Pedraza, Director IV, Planning and Evaluation Service & CIO, DOST, General Santos Avenue, Bicutan, Taguig City, 1631. crpedraza@dost.gov.ph. Tel: (02) 8837 2932. |
Updates
This notice may be updated from time to time to reflect changes in practices or the relevant legal framework. Updates will be posted on the official website.
Last updated: October 26, 2026
Data Privacy Notice for the DOST-NRCP Mobile Game App
A second tab titled DOST-NRCP Mobile Game App appears on the page, but its content was not visible in the captured view. The full text for that notice needs to be captured from the live tab.