The Commission can legally award financial indemnity and restitution to aggrieved data subjects based on the New Civil Code provisions.
Can a data subject get financial restitution for a violation of their rights? Read More »
Entities originally had exactly one year from the effectivity of the rules to completely register their data processing systems with the Commission.
Entities should utilize the encryption of personal data during active storage and transit, alongside robust authentication processes, to limit unauthorized access.
Is encryption a required technical security measure under the rules? Read More »
Improperly discarding personal information in public areas or trash containers brings 6 months to 2 years imprisonment and substantial criminal fines.
What is the exact penalty for improperly disposing of regular personal information? Read More »
Improperly disposing of sensitive personal data invites a harsher penalty of 1 to 3 years imprisonment and fines up to Php1,000,000.00.
How does the law penalize the improper disposal of sensitive personal information? Read More »
Data processed for journalistic, artistic, or literary purposes is exempted to uphold the constitutional freedom of speech, expression, and the press.
Are journalists completely exempted from the Data Privacy Act? Read More »
Accredited reporters and publishers cannot be compelled to reveal the confidential sources of any news report or information appearing in their publications.
Can journalists be compelled to reveal their sources under the Data Privacy Act? Read More »
The Commission is legally mandated to inform and proactively educate the public regarding data privacy, data protection, and fair information rights.
What is the role of the National Privacy Commission regarding public education? Read More »
The majority of the Secretariat must have served at least five years in a government agency involved in processing personal data.
What are the specific qualifications for members of the Commission’s Secretariat? Read More »
Officials are not civilly liable for good faith acts, but remain fully liable for willful or negligent acts contrary to law.
Are the Privacy Commissioner and Deputies civilly liable for their official acts? Read More »
