How is the concealment of a security breach legally penalized?
The intentional concealment of a known security breach involving sensitive personal information is a severely punishable offense. If a person has verified knowledge of a breach and the legal obligation to notify the Commission but intentionally conceals it, they face criminal liability. The imposed penalty strictly includes mandatory imprisonment ranging from one year and six months up to five full years. In addition to the prison term, a heavy fine ranging from Php500,000.00 up to Php1,000,000.00 is completely enforced under Section 30 Data Privacy Act. “SEC. 30. Concealment of Security Breaches Involving Sensitive Personal Information. – The penalty of imprisonment of one (1) year and six (6) months to five (5) years and a fine of not less than Five hundred thousand pesos (Php500,000.00) but not more than One million pesos (Php1,000,000.00) shall be imposed on persons who, after having knowledge of a security breach and of the obligation to notify the Commission pursuant to Section 20(f), intentionally or by omission conceals the fact of such security breach.” 22-May-26About Nicolas and De Vega Law Offices
Nicolas and De Vega Law Offices is a full-service law firm in the Philippines. You may visit us at the 16th Flr., Suite 1607 AIC Burgundy Empire Tower, ADB Ave., Ortigas Center, 1605 Pasig City, Metro Manila, Philippines. You may also call us at +632 84706126, +632 84706130, +632 84016392 or e-mail us at [email protected]. Visit our website https://ndvlaw.com/.
