Entities should utilize the encryption of personal data during active storage and transit, alongside robust authentication processes, to limit unauthorized access.
Is encryption a required technical security measure under the rules? Read More »
Improperly discarding personal information in public areas or trash containers brings 6 months to 2 years imprisonment and substantial criminal fines.
What is the exact penalty for improperly disposing of regular personal information? Read More »
Improperly disposing of sensitive personal data invites a harsher penalty of 1 to 3 years imprisonment and fines up to Php1,000,000.00.
How does the law penalize the improper disposal of sensitive personal information? Read More »
The Commission can legally award financial indemnity and restitution to aggrieved data subjects based on the New Civil Code provisions.
Can a data subject get financial restitution for a violation of their rights? Read More »
Entities originally had exactly one year from the effectivity of the rules to completely register their data processing systems with the Commission.
Lawful surveillance, interception, or recording of communications must strictly comply with the data privacy principles of transparency, proportionality, and legitimate purpose.
Do wiretapping and surveillance activities need to comply with the Data Privacy Act? Read More »
Entities must designate a Data Protection Officer or compliance officer completely accountable for ensuring strict adherence to privacy and security laws.
Who is responsible for ensuring an organization’s compliance with data privacy laws? Read More »
Entities must carefully select, supervise, and routinely train their employees and agents who have active access to sensitive personal data.
Entities should utilize the encryption of personal data during active storage and transit, alongside robust authentication processes, to limit unauthorized access.
Is encryption a required technical security measure under the rules? Read More »
Direct marketing involves communicating advertising or marketing materials by any means specifically directed to particular individuals.
What is the definition of direct marketing under the implementing rules? Read More »
