Is encryption a required technical security measure under the rules?
While not exclusively the only method, encryption of personal data is a strongly recommended and standard technical security measure that entities must adopt where practically appropriate. It actively involves securing the personal data both during active storage and while it is continuously in transit across electronic networks. It is often combined with strict authentication processes and other advanced technical measures that effectively control and drastically limit internal and external access. These specific technical guidelines for digital protection are specified in Section 28 IRR. “g. Encryption of personal data during storage and while in transit, authentication process, and other technical security measures that control and limit access.” 22-May-26About Nicolas and De Vega Law Offices
Nicolas and De Vega Law Offices is a full-service law firm in the Philippines. You may visit us at the 16th Flr., Suite 1607 AIC Burgundy Empire Tower, ADB Ave., Ortigas Center, 1605 Pasig City, Metro Manila, Philippines. You may also call us at +632 84706126, +632 84706130, +632 84016392 or e-mail us at [email protected]. Visit our website https://ndvlaw.com/.
