eNotaries.ph
ENFIL

Free Legal Form

Data Access or Correction Request

A letter to a company, school, hospital or app asking what personal data it holds about you, or asking it to correct or erase that data, using your rights under the Data Privacy Act.

From You

For example, juan.cruz@email.com.

For example, 8 October 2026.

To

For example, ABC Telecom Inc.

For example, dpo@abctelecom.com.ph, or 123 Ayala Avenue, Makati City.

For example, a postpaid subscriber with account No. 1234567890 since 2019. Or: a former employee from 2018 to 2024. Or: a user of the XYZ app registered under juan.cruz@email.com.

Your Requests

For example: all personal data you hold about me. Or: the call recordings and notes on my account from January to March 2026. Leave it empty if you are not asking for access.

For example: my birth date is recorded as 3 May 1990 but is 3 May 1989, as shown in my PSA Birth Certificate. Leave it empty if not needed.

For example: my mobile number and home address, because I closed my account on 1 June 2026 and you no longer need them. Leave it empty if not needed.

For example, fifteen (15).

For example, a copy of my Driver's License.

What you type is kept on this device only, so you can come back and finish later. Nothing is sent anywhere. Press Clear to erase it, especially on a shared phone or computer.

your full name
your address
email or mobile number

date

The Data Protection Officer
company name
address or email

Subject: Request regarding my personal data under the Data Privacy Act of 2012

Dear Data Protection Officer:

I am your relationship with them. As a data subject, I am writing to exercise my rights under Section 16 of Republic Act No. 10173, the Data Privacy Act of 2012.

To confirm my identity, I attach ID attached.

I would appreciate your written response within number of days days from your receipt of this letter, sent to me at email or mobile number. If you cannot grant any part of this request, please tell me which part and why.

Thank you.

Very truly yours,

your full name
Data subject

Before You Print

  • Not legal advice. This is a general form. For your own situation, consult a lawyer, especially if your case is unusual or a lot of money is involved.
  • It does not need a notary to be valid. Sign it, and keep a signed copy.
  • Section 16 of the Data Privacy Act of 2012, Republic Act No. 10173 (RA 10173), gives you the right to see your personal data within reason, to have mistakes corrected, and to have data blocked or erased when it is false, was gotten unlawfully, or is no longer needed, among other rights.
  • Send it to the organization's Data Protection Officer (DPO). Look for the DPO's email in its privacy notice or privacy policy, usually on its website or app. Keep a copy and proof of sending.
  • Fill in only the requests you are making: access, correction, erasure, or more than one. Leave the others empty.
  • The company may ask you to prove who you are before it releases or changes your data. Attaching a copy of an ID helps. You may cover numbers it does not need.
  • If the company does not answer, or refuses without good reason, you can complain to the National Privacy Commission. See the guide Data privacy complaints.

For the steps around this document, see the guide Data privacy complaints.

Related

More Forms Like This