CONTEXT: Evolution of the scope and context of privacy and confidentiality brought about by use of information and communications technology in healthcare.

OBJECTIVE: To review the legal, professional and ethical landscape of health information privacy in the Philippines.

METHODOLOGY: Systematic review of literature and policy frameworks.

RESULTS: Philippine laws jurisprudence recognize and protect privacy of health information as a general rule; impose upon individual practitioners and institutions the obligation to uphold such right; and may apply in both the traditional and eHealth milieu. There is no existing policy framework that addresses issues relating to [a] access to health information by non-health professionals, [b] use of health information for non-health purposes, and [c] rules relating to collection, storage and utilization of electronically-derived or -stored information. A privacy culture, on either the provider's or client's side, is also lacking in the country.

CONCLUSION: Technological developments have outpaced policy and practice. There is a need to unify the patchwork of regulations governing the privacy of health information; advocate for a privacy culture among professionals and patients alike; fortify the evidence base on patient and provider perceptions of privacy; and develop and improve standards and systems to promote health information privacy at the individual and institutional levels.