Government data sharing for public functions requires a formal agreement, adequate security safeguards, and is subject to strict Commission review.
What are the requirements for data sharing between government agencies? Read More »
Data processed for public benefit research is exempted, but only strictly to the minimum extent necessary and subject to ethical standards.
Is personal data processed for public benefit research exempted from the law? Read More »
Information necessary for banks and financial institutions to officially comply with the Anti-Money Laundering Act is specifically exempted from the Act.
Personal data collected from foreign residents abroad but processed in the Philippines is generally exempt, though local security measures apply.
Government employees can access sensitive data online only with proper security clearances, robust IT governance frameworks, and direct functional necessity.
Research data from third parties is allowed if publicly available or with consent, provided no decisions directly affect the data subject.
Data subjects have the absolute right to be indemnified for any damages caused by inaccurate, unlawfully obtained, or unauthorized personal data.
Does a data subject have the legal right to be indemnified for damages? Read More »
The Commission may legally authorize the postponement of a breach notification if it would actively hinder the progress of a criminal investigation.
A breach report must contain the required notification contents along with the specific name and contact details of the controller’s designated representative.
What details must be included in a breach report submitted to the Commission? Read More »
All security incidents, including those not strictly requiring formal notification, must be rigorously documented internally through comprehensive written or aggregated reports.
Are organizations required to strictly document all security incidents, even minor ones? Read More »
