Three Stars and the Sun: Information Protection

Last updated: September 11, 2026

“Sir, i-post natin para malaman ng parents ang nangyayari.”

Mukhang helpful.

Pero habang may active o unresolved school emergency, isang photo, Story, livestream, screenshot, o forwarded message ang puwedeng maglabas ng information na hindi pa dapat public.

Hindi ibig sabihin na bawal ang lahat ng communication.

Ang mas importanteng distinction:

Emergency information should come through the authorized communication process—not through personal posting ng bawat taong nasa scene.

Para sa security personnel, mas safe ang sequence:

PROTECT → VERIFY → REPORT INTERNALLY → PRESERVE INFORMATION → LET AUTHORIZED COMMUNICATION SPEAK

Kasama mismo sa current TSTS school-security roadmap ang protection ng student identities, protected locations, responder positions, CCTV, radio details, unverified suspect claims, at sensitive operational information bilang public-content boundary.

Mabilis na Sagot

Habang may active o unresolved school attack, security personnel should generally not independently post or livestream operational details from the scene.

Particularly sensitive ang:

STUDENT IDENTITIES → PROTECTED LOCATIONS → LIVE RESPONDER MOVEMENT → CCTV → INTERNAL RADIO/CHAT DETAILS → UNVERIFIED SUSPECT INFORMATION

Kung kailangan ng public update:

use the school’s authorized communication channel and only release information cleared for public dissemination.

DepEd’s 2026 Media Management Guidelines require Department-managed social media to follow communication protocols, use authorized account managers, observe data-privacy rules, and subject photo/video posting to privacy and approval controls.

1. Huwag I-post ang Exact Location ng Students na Nasa Protective Area

Example:

“Grade 7 students nandito lahat sa Room ___.”

“Mga bata nasa likod ng gym ngayon.”

Kahit ang intention ay reassure ang parents, possible nitong i-public ang location ng learners habang hindi pa resolved ang threat.

Sa ganitong situation, ang practical rule ay:

Do not independently publish a protected location while the emergency is active.

Kung kailangang malaman ng parents kung nasaan o paano kukunin ang learners, gamitin ang authorized school information and reunification process.

Hindi personal Story ng guard ang tamang emergency notification system.

TSTS public-operational-security control also requires that sensitive routes, vulnerabilities, protection patterns, and similar operational details not be exposed publicly.

2. Huwag I-livestream ang Galaw ng PNP/BFP/EMS

Imagine na nagla-live ang isang personnel:

“Dito na pumapasok ang PNP.”

Then nakikita sa video:

anong gate ang ginagamit;
saan papunta ang responders;
saan may perimeter;
saan concentrated ang personnel; o
anong area ang kasalukuyang ina-access.

Hindi kailangang i-assume na criminal offense agad ang bawat ganitong post.

Pero habang unresolved ang incident, real-time responder information can create an avoidable operational-security risk.

Mas professional:

Do not broadcast what responders are doing in real time unless the appropriate authority has cleared that information for public release.

Security personnel are there to support access, coordination, and site protection—not become live field reporters.

3. Huwag I-post ang CCTV Screenshot o Video Dahil Lang “Evidence Ito”

Ito ang isa sa pinakamalinaw na privacy boundaries.

CCTV footage can contain:

learner faces;
employees;
visitors;
injured persons;
suspects or persons incorrectly perceived as suspects;
timestamps;
location information; at
other personal data.

The National Privacy Commission’s current CCTV rules require access to stored footage and live feeds to be restricted to authorized personnel, with safeguards against unauthorized copying, viewing, alteration, or disclosure.

NPC Circular No. 2024-02 also says organizations are not automatically required to release CCTV footage to media, and disclosure must have an appropriate lawful basis and observe privacy protections.

RA 11917 itself treats privacy-violating misuse of electronic security devices or remote video surveillance as a serious regulatory matter for private security agencies.

So:

Preserve CCTV.
Do not personally publish it.

Law enforcement or the authorized CCTV custodian should handle requests according to proper procedure.

4. Huwag I-forward sa Public ang Internal Radio o Group-Chat Details

Security radio and internal chats may contain:

reported locations;
names;
instructions;
responder information;
unconfirmed descriptions;
gate status;
emergency contacts; o
changes in the situation.

The danger is not only privacy.

A radio message can be incomplete or already outdated by the time somebody screenshots and posts it.

The CSP professional-security source treats communication channels and sensitive information as items that require controlled handling so unauthorized persons do not gain access to information that should remain protected.

TSTS therefore converts that concept into a simple public rule:

Internal operational information stays internal unless authorized for release.

5. Huwag Gawing “Confirmed” ang Narinig Lang

During a crisis, mabilis ang rumors:

“Tatlo raw ang attacker.”

“Nahuli na raw.”

“Student daw ang suspect.”

“May hostage raw sa second floor.”

Ito ang dangerous transition:

REPORTED → POSTED → SHARED → TREATED AS FACT

Kung security personnel ka at hindi verified ang information:

do not publicly convert it into a confirmed statement.

For internal documentation, distinguish:

Personally observed
Reported by another person
Verified by authorized source
Unverified

The same TSTS source hierarchy specifically prohibits turning a report, suspicion, or possible weapon concern into a confirmed fact without verification.

6. Huwag Agad Mag-post ng Pangalan o Mukha ng “Suspect”

Someone may appear suspicious on CCTV.

Someone may have been reported by a witness.

Someone may have been stopped by police.

None of those automatically means:

confirmed offender na siya.

Publicly identifying a person based on incomplete information can create privacy, fairness, reputational, and investigative problems.

Security personnel should not personally run a social-media identification campaign unless it is part of an authorized law-enforcement or school communication process.

If the proper authority decides that public assistance is required, let that authority control:

what image is released;
what wording is used;
what information is verified; at
where responses should be sent.

7. Student Photos Deserve Extra Care

Learners are not just background objects in an emergency photo.

Their names, faces, uniforms, injuries, emotional condition, and location may reveal personal information.

The National Privacy Commission reminds the public that photos and videos containing identifiable individuals are personal data and that social-media sharing must have a lawful basis and follow transparency, legitimate-purpose, and proportionality principles.

DepEd also issued specific guidance reminding schools to protect learners’ images and data on social media, while its newer 2026 Media Management Guidelines require privacy controls and authorization for official photo/video posting.

During a serious school incident, the practical standard should therefore be:

Do not independently post identifiable learners merely because the photo feels newsworthy or urgent.

Especially avoid posting injured, distressed, hiding, evacuated, or otherwise vulnerable learners without proper authorization and lawful basis.

8. “Pero Official School Page Naman”

Official account does not mean:

anything can be posted immediately.

DepEd’s current Media Management Guidelines emphasize authorized account management, verification, privacy, and clearance of content. They also prioritize official issuances, statements, press releases, and advisories.

That means the better emergency-information structure is:

FIELD PERSONNEL → AUTHORIZED SCHOOL/INCIDENT LEAD → VERIFIED MESSAGE → OFFICIAL CHANNEL

Not:

every guard, teacher, staff member, and administrator posting their own version.

One verified message is better than ten conflicting “updates.”

9. Ano ang Puwedeng Gawin ng Guard Instead?

Kung may important information ka habang nasa duty:

Report it internally

Ibigay ang:

exact observation;
time;
location;
source;
action taken; at
current status.

Preserve it

If may relevant:

CCTV;
photo taken for authorized documentation;
log;
radio entry; o
message,

preserve according to procedure rather than posting it publicly.

Follow authorized communication

Kung may designated school spokesperson, incident lead, administrator, PNP/BFP/EMS information officer, or other proper authority:

let the authorized communication structure handle public release.

Continue your assigned security role

Do not let content creation interfere with:

gate control;
perimeter;
emergency lane;
evacuation/reunification support;
radio monitoring;
documentation; o
responder coordination.

Simple “Post or Don’t Post?” Check

Before posting anything related to an unresolved school attack, ask:

1. Authorized ba akong mag-release nito?

2. Verified ba ang information?

3. May student or other identifiable personal data ba?

4. Makikita ba ang protected location or responder movement?

5. May CCTV, radio, map, access, or internal operational detail ba?

6. May official communication channel bang dapat mauna sa akin?

Kapag hindi malinaw ang sagot:

Don’t post first. Coordinate first.

Tandaan

Sa ordinaryong araw, isang photo ay maaaring simpleng content.

Sa emergency, ang parehong photo ay maaaring maglaman ng:

identity, location, movement, access information, operational detail, or unverified claim.

Kaya ang professional mindset:

Hindi lahat ng alam mo kailangang i-post.

Hindi lahat ng nakita mo kailangang i-live.

Hindi lahat ng narinig mo ay confirmed.

At higit sa lahat:

Security information should protect the response—not compete with it.

Ang role ng guard ay hindi maging fastest source sa social media.

Ang goal ay:

Protect people → protect information → verify → coordinate → document → let authorized communication speak.

Official References / Sources Consulted

Department of Education — DepEd Order No. 007, s. 2026: Media Management Guidelines. Used for current controls on official DepEd media/social-media management, authorization, verification, data privacy, and photo/video publication.

Department of Education — Guidance on Posting Learners’ Images or Data on Social Media, OM-OUOPS-2024-05-03942. Used for learner-image/data privacy considerations.

National Privacy Commission — NPC Circular No. 2024-02, CCTV Systems. Used for CCTV access, safeguards, disclosure, law-enforcement requests, media requests, and privacy controls.

National Privacy Commission — Reminder on Sharing Photos and Videos Containing Personal Data. Used for the Data Privacy Act principles applicable to social-media sharing of identifiable images and videos.

Republic Act No. 11917 — Private Security Services Industry Act. Used for the private-security framework and the privacy-related limitation concerning electronic security devices and remote video surveillance.

CSP Manual — Protection of Sensitive Information. Used only as professional-security support for controlling sensitive information and communications media; it is not treated as current privacy law or a universal school SOP.

Educational and Operational Note

This article is a general educational security and information-protection reference.

Actual communication and posting rules depend on:

school type and policy;
DepEd rules where applicable;
Data Privacy Act requirements;
school/client privacy policies;
agency policy;
incident-command instructions;
PNP/BFP/EMS directions;
nature and status of the threat;
lawful basis for processing or disclosure; and
specific facts of the incident.

Nothing here prevents an authorized public-information function from issuing a necessary emergency advisory.

The distinction is simple:

Authorized, verified emergency communication is different from independent personal posting by personnel at the scene.

Three Stars and the Sun

Friday, September 11, 2026

Social Media Habang May School Attack: Ano ang Hindi Dapat I-post ng Security Personnel?