Profiling is the automated processing of personal data to evaluate or predict an individual’s work performance, health, preferences, reliability, or movements.
What does profiling entail under the data privacy rules? Read More »
Notifications must detail the breach’s nature, affected data, mitigation measures, contact representatives, and provided assistance to the data subjects.
What specific information must a complete data breach notification formally contain? Read More »
Subcontracting agreements must strictly stipulate that a binding obligation of confidentiality is imposed on all persons authorized to process data.
Controllers with under 250 employees are exempt from registration unless processing poses risks, is non-occasional, or includes 1,000 sensitive records.
Decisions producing legal effects concerning a data subject cannot be based solely on automated processing without the individual’s consent.
Can a decision with legal effects be made solely on the basis of automated processing? Read More »
Maliciously disclosing unwarranted or false personal information is penalized with 1.5 to 5 years imprisonment and heavily fined up to Php1,000,000.00.
What is the formal penalty for maliciously disclosing false personal information? Read More »
Public officers committing offenses face an additional accessory penalty of absolute disqualification from public office for double the criminal term.
Controllers must implement data protection policies covering organizational, physical, and technical security measures tailored to the specific processing risks.
What must a personal information controller do regarding data protection policies? Read More »
Records must describe the processing system, purposes, data subjects, data flow, security measures, and accountable compliance officers.
What essential details must be included in the records of processing activities? Read More »
Policies must prevent mechanical file destruction, and workstations must be secured against natural disasters, power issues, and unauthorized access.
