Compliance

Data privacy and transparency for barangays

A barangay that handles residents' personal data has real obligations under Philippine law. ByteBento BOS is built to support them — the Data Privacy Act, the E-Governance Act, and DILG Full Disclosure — with practical tools, not promises.

The Data Privacy Act (RA 10173)

The Data Privacy Act gives residents rights over their personal data and requires organisations that handle it — including local government units — to protect it, appoint a data protection officer, and report breaches. BOS helps a barangay meet those duties:

  • A Data Privacy Act consent notice appears before any public form collects information.
  • Resident submissions sit in a staff-review queue and never change the official record on their own.
  • Every change is logged with who made it and the before-and-after values.
  • Only the data a service needs is collected, and each barangay's data is isolated from the others'.

The barangay remains the Personal Information Controller, responsible for designating a Data Protection Officer or Compliance Officer for Privacy and, where required, registering its data processing system with the National Privacy Commission. BOS provides the tooling; we point you to what your barangay still needs to do.

The E-Governance Act (RA 12254)

Signed in 2025, the E-Governance Act directs government units — barangays included — to bring public services online, by building their own digital portal or adopting the DICT's eLGU system. BOS is a fast, supported way to have your own compliant public portal: online services, transparency pages, and a real online address for residents.

DILG Full Disclosure

Barangays are required to publish key financial documents — budget, income and expenditures, procurement, and more — where the public can see them. BOS includes a Full Disclosure dashboard and public budget pages, so the documents you already have to disclose live on your official website instead of a folder no one can find.

How your data is handled

  • Each barangay's data is isolated from every other barangay's.
  • Records are backed up nightly.
  • Traffic is served over encrypted (HTTPS) connections.
  • Passwords are stored hashed, and every admin login attempt is recorded.

This page is general information, not legal advice. Requirements under RA 10173, RA 12254, and DILG issuances change and depend on your barangay's circumstances — confirm specifics with the National Privacy Commission and the DILG. ByteBento provides tools that support compliance; responsibility for compliance rests with the barangay as data controller.