To which acts must a COVID-19 testing laboratory's communications, recording, reporting and releasing of results conform?

To which acts must a COVID-19 testing laboratory's communications, recording, reporting and releasing of results conform?

• A. Civil Code and Privacy Act
• B. Data Privacy Act of 2012 (RA 10173) and Mandatory Reporting of Notifiable Diseases and Health Events of Public Health Concern Act (RA 11332)
• C. Public Health Act
• D. Data Privacy Act of 2012 only

Answer: (B)

Handling communications, records, reporting, and releasing COVID-19 test results sits at the crossroads of protecting patient information and ensuring public health surveillance. The Data Privacy Act of 2012 sets the rules for processing personal data from tests—who may access it, how it can be disclosed, how long it’s kept, and what security measures are required. At the same time, RA 11332 requires laboratories to report notifiable diseases and health events to health authorities within designated timelines, enabling appropriate public health actions. Together, these two laws cover both the privacy of individuals’ test results and the mandatory reporting needed for public health monitoring, which is why they form the correct framework. The other options don’t pair privacy protections with mandatory disease reporting, or reference statutes that don’t specifically address the lab’s obligations for both areas.

Handling communications, records, reporting, and releasing COVID-19 test results sits at the crossroads of protecting patient information and ensuring public health surveillance. The Data Privacy Act of 2012 sets the rules for processing personal data from tests—who may access it, how it can be disclosed, how long it’s kept, and what security measures are required. At the same time, RA 11332 requires laboratories to report notifiable diseases and health events to health authorities within designated timelines, enabling appropriate public health actions. Together, these two laws cover both the privacy of individuals’ test results and the mandatory reporting needed for public health monitoring, which is why they form the correct framework. The other options don’t pair privacy protections with mandatory disease reporting, or reference statutes that don’t specifically address the lab’s obligations for both areas.