An offense is considered large-scale, strictly warranting the maximum penalty, if the personal data of at least 100 persons is harmed.
When is a data privacy violation officially considered a large-scale offense? Read More »
Privileged information encompasses any data constituting legally protected privileged communication under the Rules of Court and other pertinent Philippine laws.
How is privileged information defined under the Data Privacy Act? Read More »
Office spaces and workstations must be physically designed and arranged to practically ensure complete privacy for anyone actively processing personal data.
What physical security measures must be considered regarding office space design? Read More »
A security incident is any occurrence threatening data protection, including prevented breaches that were stopped by active internal security safeguards.
How does the implementing rules define a “Security incident”? Read More »
Intentionally breaking into systems containing personal data is severely punished by 1 to 3 years imprisonment and hefty criminal fines.
Processing involves any operation performed on personal data, including its collection, recording, organization, storage, modification, use, erasure, or final destruction.
How does the Data Privacy Act define the processing of personal information? Read More »
A filing system is a structured set of information relating to individuals that makes specific personal data readily accessible to users.
What is considered a filing system under the Data Privacy Act? Read More »
It is a system involving computer networks and procedures for generating, sending, receiving, storing, or processing electronic data and messages.
How is an information and communications system defined? Read More »
A personal information processor is a natural or juridical person to whom a controller securely outsources the processing of personal data.
Who qualifies as a personal information processor under the law? Read More »
Government data sharing for public functions requires a formal agreement, adequate security safeguards, and is subject to strict Commission review.
What are the requirements for data sharing between government agencies? Read More »
