Lawful surveillance, interception, or recording of communications must strictly comply with the data privacy principles of transparency, proportionality, and legitimate purpose.
Do wiretapping and surveillance activities need to comply with the Data Privacy Act? Read More »
Entities must designate a Data Protection Officer or compliance officer completely accountable for ensuring strict adherence to privacy and security laws.
Who is responsible for ensuring an organization’s compliance with data privacy laws? Read More »
Entities must carefully select, supervise, and routinely train their employees and agents who have active access to sensitive personal data.
Entities should utilize the encryption of personal data during active storage and transit, alongside robust authentication processes, to limit unauthorized access.
Is encryption a required technical security measure under the rules? Read More »
Direct marketing involves communicating advertising or marketing materials by any means specifically directed to particular individuals.
What is the definition of direct marketing under the implementing rules? Read More »
A personal data breach is a security incident leading to the accidental or unlawful destruction, loss, alteration, or unauthorized access to data.
How is a personal data breach legally defined? Read More »
Profiling is the automated processing of personal data to evaluate or predict an individual’s work performance, health, preferences, reliability, or movements.
What does profiling entail under the data privacy rules? Read More »
Data processed for journalistic, artistic, or literary purposes is exempted to uphold the constitutional freedom of speech, expression, and the press.
Are journalists completely exempted from the Data Privacy Act? Read More »
Accredited reporters and publishers cannot be compelled to reveal the confidential sources of any news report or information appearing in their publications.
Can journalists be compelled to reveal their sources under the Data Privacy Act? Read More »
The Commission is legally mandated to inform and proactively educate the public regarding data privacy, data protection, and fair information rights.
What is the role of the National Privacy Commission regarding public education? Read More »
