Section 18
SEC. 18. Safeguards on the Philippine Identification System (PhilSys).-The PSA with the technical assistance of th DICT shall implement reasonable and appropriate organizational, technical, and physical security measures to ensure that the information gathered for the PhilSys, including information stored in the PhilSys Registry, is protected from unauthorized access, use, disclosure, and against accidental or intentional loss, destruction, or damage. Moreover, PSA shall ensure that individuals are adequately informed upon registration for PhilSys on how their data will be used and how they can access their registered information and record history. While upholding the confidentiality provisions under Republic Act No. 10625, otherwise known as the "Philippine Statistical Act of 2013", all data collated by the PSA under the PhilSys may be used to generate aggregate data or statistical summaries without reference to or identification of any specific individual: Provided, That nothing in this Act shall be construed as prohibiting or limiting the sharing or transfer of any personal data that is already authorized or required by law.