NMAT Online Registration System

Data Privacy Policy

Pursuant to our responsibilities under Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012, the Commission on Higher Education (CHEd) and the Center for Educational Measurement (CEM) affirm your right to privacy of your personal data, particularly in relation to your application to take the National Medical Admission Test (NMAT) and to apply to medical school. This right extends both to processed information as well as to the raw data upon which processed information is based.

This data privacy policy ("Privacy Policy") describes our practices regarding the collection, storage, protection, and use of your personal data.

I. Scope and Consent

By using the NMAT Online Registration System and providing your personal data in connection with your application to take the NMAT, you accept the practices described in this data privacy policy and consent to the collection and use of this information by CHEd and CEM. By registering online, you explicitly authorize:

• CEM, its employees, and third-party service providers, to use your personal data for purposes of providing services to you or for other reasonable purposes which are related to the services it provides or improvements / upgrades in its systems and business processes, including but not limited to test administration, scoring, and release / delivery of test results.
• CEM to share / release your personal data (name and test results) to Philippine medical schools as a way to authenticate test results and safeguard against falsification of the former.
• CHEd and CEM to use your personal data for research and statistical purposes.

CHEd and CEM reserve the right to make changes to this Privacy Policy at any time. Any changes will be posted on this page.

II. Collected Information

The information to be collected consists of information that you voluntarily provide to us when you register to take the NMAT. This includes personally identifying information such as your (1) personal contact information, (2) educational background, (3) demographic information, (4) photograph (5) parents information (6) factors affecting your course choice (7) account login information, (8) credit card information (9) technical computer information, and (10) website usage information.

III. Storage and Protection of Collected Information

The personal data obtained through this website is entered and stored within the CEM's authorized information and communications system, and will be accessed only by CHEd and CEM authorized personnel. Reasonable physical and technical safeguards are used to secure your personal data from unauthorized access, use, or disclosure.

IV. Sharing and Use of Collected Information

Your personal data is collected primarily for the purpose of (1) providing you with NMAT test registration services, (2) enabling billing and shipping, (3) ensuring your safety and convenience during the testing process, (4) processing, reporting, and disseminating of test results for admission, research, and scholarship purposes, (5) generating relevant statistics for educational purposes, (6) profiling, historical, and statistical purposes, and (7) for systems administration and troubleshooting purposes.

Your contact information (email address phone number/s) and test results may be shared with medical schools who may invite you to enroll in their school, and/or offer scholarship grants, unless you withhold consent thereto (Indicate your consent in the Data Release Question of the Application Form in Step 3).

V. Retention and Confidentiality of Collected Information

NMAT data are the property of the CHEd and CEM and are to be kept indefinitely for historical, statistical, and educational purposes. The appropriate organizational, physical, and technical security measures will be used to secure your personal data from unauthorized access, use, or disclosure.

VI. Legal Disclosure

We reserve the right to disclose personal information to our service providers, the government, law enforcement agencies, or other third parties under certain circumstances where a formal request has been made (such as in responding to a court order, subpoena, or judicial proceeding), that we deemed necessary and appropriate.

VII. Your Rights

Pursuant to the Data Privacy Act, you have the following rights:

• The right to privacy;
• The right to be informed of the processing of your personal data;
• The right to be informed of any data breach;
• The right to access your personal data, to rectify the same, and to erasure or blocking of such information upon reasonable request;
• The right to object to further processing;
• The right to lodge a complaint before the National Privacy Commission; and
• The right to damages when appropriate.