Philippines Data Privacy Act 11: General data privacy principles: transparency, legitimate purpose, proportionality

Processing of personal information is allowed subject to the Act and to the principles of transparency, legitimate purpose and proportionality, and the controller must ensure the principles are implemented: personal information must be collected for specified and legitimate purposes determined and declared before, or as soon as reasonably practicable after, collection and later processed only compatibly with them; processed fairly and lawfully; accurate, relevant and where necessary kept up to date, with inaccurate or incomplete data rectified, supplemented, destroyed or their further processing restricted; adequate and not excessive for the purposes; retained only as long as necessary for the purposes, for the establishment, exercise or defence of legal claims, for legitimate business purposes or as provided by law; and kept in a form permitting identification of data subjects no longer than necessary, with longer storage for historical, statistical or scientific purposes only where adequate safeguards are guaranteed.