At the time of collecting staff's personal data, institutions should make its personal data collection statement known to them. Institutions should have their statement ready as soon as possible. Since the PDPB is relatively new, therefore the time allowance for preparing the statement is liberally provided. If, however, an institution fails to prepare its statement in its given time allowance, the PDPB will convey its advisory again. Failing that, the PDPB will subject it to a penalty.