Under the Data Privacy Act, medical info is sensitive personal info: Only the patient, no one else, is allowed to disclose it

…unless it’s the President of the Philippines and there is incapacity to execute functions, like being in a comatose (under the Consti, that has to be disclosed)