In accordance with the Philippines Republic Act No. 10173, also known as the Data Privacy Act of 2012, all personal information collected by the school must only be used for appropriate institutional purposes and not for any other purpose. This Act ensures that the collection, use, and protection of personal information are in compliance with legal standards.

The Data Protection Office at Rizal Technological University is responsible for ensuring the protection of user data and maintaining secure transaction requests. The office implements stringent measures to safeguard personal information against unauthorized access, use, or disclosure, as mandated by the following key sections of the Data Privacy Act:

Chapter IV, Section 20: This section emphasizes the security of personal information, requiring institutions to implement appropriate organizational, physical, and technical security measures to protect data.

Chapter III, Section 12: This section outlines the criteria for lawful processing of personal information, ensuring that data is collected and used for specified, legitimate purposes.

Chapter VI, Section 30: This section discusses the accountability principle, which holds institutions responsible for ensuring compliance with the Act and implementing necessary safeguards for data protection.In addition to these measures, the Data Protection Office ensures that all data processing activities are transparent and that individuals are informed about how their personal information is being used. The office also facilitates the exercise of data subjects' rights, such as the right to access and correct their personal data, as stipulated under Chapter IV, Section 16 of the Act.

The Data Privacy Act of 2012 is a comprehensive legislation that guarantees the protection of personal information in the Philippines. It provides a legal framework for privacy and data protection, ensuring that individuals' rights are safeguarded and that organizations handling personal data adhere to high standards of data security and privacy.