What is the specific penalty for unauthorized access or intentionally breaking into a data system?

Intentionally breaking into a data system is treated as a highly severe criminal act under the Philippine data privacy framework. Any person who knowingly and unlawfully breaks into any system where personal data is stored faces a heavy penalty of imprisonment. The mandatory duration of this strict imprisonment ranges from one full year up to three years. Furthermore, a massive financial fine ranging from Five hundred thousand pesos up to Two million pesos is actively imposed according to Section 29 Data Privacy Act. “SEC. 29. Unauthorized Access or Intentional Breach. – The penalty of imprisonment ranging from one (1) year to three (3) years and a fine of not less than Five hundred thousand pesos (Php500,000.00) but not more than Two million pesos (Php2,000,000.00) shall be imposed on persons who knowingly and unlawfully, or violating data confidentiality and security data systems, breaks in any way into any system where personal and sensitive personal information is stored.” 22-May-26

About Nicolas and De Vega Law Offices

 Nicolas and De Vega Law Offices is a full-service law firm in the Philippines.  You may visit us at the 16th Flr., Suite 1607 AIC Burgundy Empire Tower, ADB Ave., Ortigas Center, 1605 Pasig City, Metro Manila, Philippines.  You may also call us at +632 84706126, +632 84706130, +632 84016392 or e-mail us at [email protected]. Visit our website https://ndvlaw.com/.