The University of the Philippines (UP/we), which includes relevant UP System administration and Constituent University (CU) offices, will make use of fully automated means to process the personal information and sensitive personal information (personal data) contained in your application for a University of the Philippines College Admissions Test (UPCAT) account.

We use automated means as the sole basis for the creation of UPCAT accounts that are used by applicants for filing UPCAT applications in order to efficiently process the same, prevent human error or bias and enable us to treat applicants fairly.

Section 18 (c) of the Memo Circular 2023-04 of the National Privacy Commission states:

  A PIC shall obtain the consent of the data subject when automated processing is the sole basis for a decision that produces legal effects on or may significantly affect the data subject.

Since we wish to comply with the Philippine Data Privacy Act (PDPA) and uphold your data privacy rights, we therefore request you to carefully read and thereafter indicate your consent for the processing of your personal data by submitting this certification and data privacy consent form through electronic means via the UPCAT account registration site. If you are below eighteen years of age, it is your responsibility to strictly follow the instructions in the site for indicating that your parent or guardian is granting consent for and in your behalf through the submission of your application for UPCAT account registration.

If you do not grant consent, we regret that we will not be able to process your UPCAT account registration.

While we obtain your consent for such automated decision making means, please note that our processing of your personal data for the creation of your UPCAT account and UPCAT application as well as supporting documents that you submit is ultimately based on UPs right to exercise academic freedom under the 1987 Constitution, our Charter R.A. 9500, other applicable laws such as the Education Act of 1982 and Philippine jurisprudence.

I certify that:

(1) I read all the information contained in the UPCAT account registration site and General Information Bulletin on First Year Admissions for Academic Year 2026 – 2027 and understood all the instructions in connection with my application for an UPCAT account and my application for admission to the University of the Philippines.

(2) I also read and understood the UP System Privacy Notice for First Year Admissions for Academic Year 2026 – 2027.

(3) All the information supplied in support of my UPCAT account application are true, complete and accurate.

(4) I am not taking, nor have I taken, any college-level subject in any school, college or university.

(5) I will abide by UP’s rules, including those on admission, processing fees, tuition, scholarships, and financial assistance programs.

(6) I affirm that my UPCAT account application and UPCAT application shall be subject to – among others – Republic Act No. 10533 (or the K-12 Law), its implementing rules and regulations, and all relevant Department of Education issuances.

I am aware that any information furnished in support of my UPCAT account application and UPCAT application will be checked against the original documents, and that withholding information or giving false information will disqualify me from admission, or will be a basis for dismissal if I am admitted. I also understand that no results for my application may be released until all requirements are submitted.

I grant my consent to the University of the Philippines to process my personal data pursuant to Sec. 18 (c) of the National Privacy Commission Memorandum Circular 2023-04 listed below, including my:

Current status (year level, if I have graduated from senior high school etc.)

UPCAT/UPCA history

Complete name (first name, middle name if applicable, and last name) as it appears in my PSA birth certificate

Birthdate

Senior high school where I graduated from or will be graduating from

Valid email address

for the purpose of creating my UPCAT account and all other related purposes, including but not limited to:

identify verification, fraud prevention, communicating with me regarding my UPCAT account and enabling UP to enforce all its admission rules pursuant to its exercise of academic freedom.

I further understand and agree that in case I withdraw my consent for the processing of my personal data for my UPCAT application, UP, in the exercise of its academic freedom will continue to process my name, birthdate, senior high school, valid email address and UPCAT / UPCA history for the purpose of enforcing the rule that withdrawal of consent is final; that I am not allowed to create another UPCAT account using another email address and that I am allowed to take the UPCAT only once.

I also understand and agree that as stated in the abovementioned privacy notice for UPCAT and this form that UP is authorized to process my personal data for other lawful purposes as provided under the PDPA and other applicable laws including processing for the purpose of exercising its right and responsibility of academic freedom, research, compliance with legal obligations and issuances of public authorities which may include disclosure of my personal data to such public authorities, for the purpose of establishing or defending legal claims and defenses, etc. and that therefore UP will continue to securely store my personal data for as long as necessary in order to fulfill such other legitimate purposes as allowed by the PDPA and other applicable laws.

I am aware that the processing of personal data for my UPCAT account registration, UPCAT application and any appeal thereon carries risks that may involve the confidentiality, integrity and availability of personal data or the risk that processing will violate the privacy principles and rights of data subjects. I understand that UP has put in place reasonable physical (e.g. access control measures such as locks, security personnel etc) organizational (e.g. only authorised personnel who have signed the required non-disclosure undertaking and need such personal data to perform their functions are allowed to process such personal data, privacy impact assessments etc) and technical measures (use of CDN, encryption, multifactor authentication, the conduct of vulnerability and penetration testing and other similar measures) to prevent or mitigate such risks as stated in the abovementioned privacy notice. I understand that such measures do not guarantee absolute protection against such risks as when systems are subject to targeted cyberattacks, malware, ransomware, computer viruses, etc. However, UP has also adopted measures in order to deal with security incidents or personal data breaches in compliance with the PDPA and NPC issuances (Part 7 Security Incident or Breach Response Procedures of the UP System Data Privacy Manual approved by the Board of Regents and the corresponding forms for security incident or data breach management UNIVERSITY OF THE PHILIPPINES SYSTEM ADMINISTRATION INCIDENT OR BREACH REPORT FORM.docx; PRELIMINARY ASSESSMENT FORM FOR SECURITY INCIDENTS OR PERSONAL DATA BREACHES; Mandatory Notification to NPC.pdf; Mandatory Personal Data Breach Notification for Data Subjects.docx and SECURITY INCIDENT OR PERSONAL DATA BREACH REPORT).

I agree that I will help keep my personal data secure by, double checking that the email account I will be using for my UPCAT account and UPCAT application has not been compromised by using Have I Been Pwned,using a strong password for such account https://itdc.up.edu.ph/about/advisories/2023%2012%2004%20REMINDER%20-%20Use%20Strong%20Passwords%20for%20UP%20Mail%20Accounts.pdf, when possible activating two factor authentication for the same, not using public, unsecured networks for submitting my personal data or at least using VPN if I use such unsecured networks and keeping my UPCAT portal account credentials confidential.

I have been made aware through the UPCAT privacy notice and this certification and consent form about my rights as a data subject to information, access, the right to object to the processing of my personal data, deletion, to lodge a complaint with the National Privacy Commission for the violation of my data privacy rights and the right to receive damages for such violations pursuant to a valid order of the proper public authority.

I also recognize that while I have the right to correct my personal data, it is my duty to keep my personal data as well as that of relevant third parties updated, to follow the instructions contained in the UPCAT registration site and UPCAT portal regarding the manner by which I can correct or update my or third party personal data within the deadline set for the processing of applications as well as appeals. Should I need to correct my personal data, I understand and agree that I must email [email protected] within the deadline.

I am aware that for any queries or suggestions regarding this certification and data privacy consent form or data privacy concerns regarding personal data processed via the UPCAT portal I may contact the UP System Data Protection Officer through:

Via post
c/o Office of the President
2F North Wing Quezon Hall
(Admin Building) University Avenue,
UP Diliman, Quezon City 1101
Philippines

Through the following landlines
Phone | (632) 89280110; (632) 89818500 loc. 2521

Through email
[email protected]

The University of the Philippines (UP/we), which includes relevant UP System administration and Constituent University (CU) offices, will make use of fully automated means to process the personal information and sensitive personal information (personal data) contained in your child/dependent/ward’s application for a University of the Philippines College Admissions Test (UPCAT) account.

We use automated means as the sole basis for the creation of UPCAT accounts that are used by applicants for filing UPCAT applications in order to efficiently process the same, prevent human error or bias and enable us to treat applicants fairly.

Section 18 (c) of the Memo Circular 2023-04 of the National Privacy Commission states:

  A PIC shall obtain the consent of the data subject when automated processing is the sole basis for a decision that produces legal effects on or may significantly affect the data subject.

Since we wish to comply with the Philippine Data Privacy Act (PDPA) and uphold the data privacy rights of your child/dependent/ward, we therefore request you to carefully read and thereafter indicate your consent for the processing of your personal data and that of your child/dependent/ward by submitting this certification and data privacy consent form through electronic means via the UPCAT account registration site. You understand and agree that it is the responsibility of your child/dependent/ward to strictly follow the instructions in the site for indicating that you are granting consent for and in behalf of your child/dependent/ward through the submission of this certification and data privacy consent form.

If you do not grant consent, we regret that we will not be able to process the UPCAT account registration of your child/dependent/ward.

While we obtain your consent for such automated decision making means, please note that our processing of the personal data of your child/dependent/ward for the creation of his/her UPCAT account and UPCAT application as well as supporting documents that s/he will submit is ultimately based on UPs right to exercise academic freedom under the 1987 Constitution, our Charter R.A. 9500, other applicable laws such as the Education Act of 1982 and Philippine jurisprudence.

I certify that:

(1) all the information which my child/dependent/ward provided in support of his/her application for an UPCAT account are true, complete and accurate.

(2) I read all information contained in the General Information Bulletin on First Year Admissions for Academic Year 2026 – 2027 and agree to abide by UP’s rules, including those on admission, processing fees, tuition, scholarships and financial assistance programs.

(3) I read and understood the UP System Privacy Notice for First Year Admissions for Academic Year 2026 – 2027.

(4) I am aware that my child/dependent/ward's application shall be subject to – among others – Republic Act No. 10533 (or the K-12 Law), its implementing rules and regulations, and all relevant Department of Education issuances.

(5) I recognize that in signing this application form, I share with my child/dependent/ward the responsibility for the veracity and completeness of the information supplied.

I grant my consent to the University of the Philippines to process my personal data as well as that of my child/dependent/ward pursuant to Sec. 18 (c) of the National Privacy Commission Memorandum Circular 2023-04 listed below, including:

my complete name (first name, middle name if applicable, and last name)

the complete name (first name, middle name if applicable, and last name) of my child/dependent/ward as indicated in his or her PSA birth certificate

her/his current status (year level, if s/he has graduated from senior high school etc.)

his/her UPCAT/UPCA history

the birth date of my child/dependent/ward

Senior high school where my child/dependent/ward graduated from or will be graduating from

Valid email address of my child/dependent/ward

for the purpose of creating his or her UPCAT account and all other related purposes, including but not limited to:

identify verification, fraud prevention, communicating with my child/dependent/ward regarding his/her UPCAT account and enabling UP to enforce all its admission rules pursuant to its exercise of academic freedom.

I further understand and agree that in case I withdraw consent for the processing of the personal data of my child/dependent/ward for his/her UPCAT application, UP, in the exercise of its academic freedom will continue to process the name, birthdate, senior high school, valid email address and UPCAT/UPCA history of my child/dependent/ward for the purpose of enforcing the rule that withdrawal of consent is final; that my child/dependent/ward is not allowed to create another UPCAT account using another email address and that my child/dependent/ward is allowed to take the UPCAT only once.

I also understand and agree that as stated in the abovementioned privacy notice for UPCAT and this form that UP is authorized to process the personal data of my child/dependent/ward for other lawful purposes as provided under the PDPA and other applicable laws including processing for the purpose of exercising its right and responsibility of academic freedom, research, compliance with legal obligations and issuances of public authorities which may include disclosure of my child/dependent/ward’s personal data to such public authorities, for the purpose of establishing or defending legal claims and defenses, etc. and that therefore UP will continue to securely store my personal data for as long as necessary in order to fulfill such other legitimate purposes as allowed by the PDPA and other applicable laws.

I am aware that the processing of personal data for my child/dependent/ward’s UPCAT account registration, UPCAT application and any appeal thereon carries risks that may involve the confidentiality, integrity and availability of personal data or the risk that processing will violate the privacy principles and rights of data subjects. I understand that UP has put in place reasonable physical (e.g. access control measures such as locks, security personnel etc) organizational (e.g. only authorised personnel who have signed the required non-disclosure undertaking and need such personal data to perform their functions are allowed to process such personal data, privacy impact assessments etc) and technical measures ( use of CDN, encryption, multifactor authentication, the conduct of vulnerability and penetration testing and other similar measures) to prevent or mitigate such risks as stated in the abovementioned privacy notice. I understand that such measures do not guarantee absolute protection against such risks as when systems are subject to targeted cyberattacks, malware, ransomware, computer viruses, etc. However, UP has also adopted measures in order to deal with security incidents or personal data breaches in compliance with the PDPA and NPC issuances (Part 7 Security Incident or Breach Response Procedures of the UP System Data Privacy Manual approved by the Board of Regents and the corresponding forms for security incident or data breach management UNIVERSITY OF THE PHILIPPINES SYSTEM ADMINISTRATION INCIDENT OR BREACH REPORT FORM.docx; PRELIMINARY ASSESSMENT FORM FOR SECURITY INCIDENTS OR PERSONAL DATA BREACHES; Mandatory Notification to NPC.pdf; Mandatory Personal Data Breach Notification for Data Subjects.docx and SECURITY INCIDENT OR PERSONAL DATA BREACH REPORT).

I agree that I will help keep the personal data of my child/dependent/ward secure by, double checking that the email account s/he will be using for his or her UPCAT account and UPCAT application has not been compromised by using Have I Been Pwned,using a strong password for such account https://itdc.up.edu.ph/about/advisories/2023%2012%2004%20REMINDER%20-%20Use%20Strong%20Passwords%20for%20UP%20Mail%20Accounts.pdf, when possible activating two factor authentication for the same, not using public, unsecured networks for submitting my child/dependent/ward’s personal data or at least using VPN if s/he uses such unsecured networks and reminding my child/dependent/ward to keep his or her UPCAT portal account credentials confidential.

I have been made aware through the UPCAT privacy notice and this certification and consent form about my rights and that of my child/dependent/ward as data subjects to information, access, the right to object to the processing of my personal data, deletion, to lodge a complaint with the National Privacy Commission for the violation of our data privacy rights and the right to receive damages for such violations pursuant to a valid order of the proper public authority.

I also recognize that while my child/dependent/ward has the right to correct his or her personal data, it is his/her duty to keep his/her and my personal data as well as that of relevant third parties updated, to follow the instructions contained in the UPCAT registration site and UPCAT portal regarding the manner by which s/he can correct or update relevant personal data within the deadline set for the processing of applications as well as appeals. Should my child/dependent/ward need to correct personal data, I understand and agree that s/he must email [email protected] within the deadline.

I am aware that for any queries or suggestions regarding this certification and data privacy consent form or data privacy concerns regarding personal data processed via the UPCAT portal I may contact the UP System Data Protection Officer through:

Via post
c/o Office of the President
2F North Wing Quezon Hall
(Admin Building) University Avenue,
UP Diliman, Quezon City 1101
Philippines

Through the following landlines
Phone | (632) 89280110; (632) 89818500 loc. 2521

Through email
[email protected]