What is the formal penalty for maliciously disclosing false personal information?
The malicious and bad faith disclosure of false personal information is strictly considered a severe and heavily punishable privacy offense. Any controller or processor who intentionally discloses unwarranted or completely false information relative to personal data shall face a very significant penalty. The severe punishment legally involves mandatory imprisonment ranging from one year and six months up to five full years, alongside a heavy financial fine of up to One million pesos. This strict criminal liability for data handlers is carefully established in Section 58 IRR. “Section 58. Malicious Disclosure. Any personal information controller or personal information processor, or any of its officials, employees or agents, who, with malice or in bad faith, discloses unwarranted or false information relative to any personal information or sensitive personal information obtained by him or her, shall be subject to imprisonment ranging from one (1) year and six (6) months to five (5) years and a fine of not less than Five hundred thousand pesos (Php500,000.00) but not more than One million pesos (Php1,000,000.00).” 20-May-26About Nicolas and De Vega Law Offices
Nicolas and De Vega Law Offices is a full-service law firm in the Philippines. You may visit us at the 16th Flr., Suite 1607 AIC Burgundy Empire Tower, ADB Ave., Ortigas Center, 1605 Pasig City, Metro Manila, Philippines. You may also call us at +632 84706126, +632 84706130, +632 84016392 or e-mail us at [email protected]. Visit our website https://ndvlaw.com/.

