Who is considered a personal information controller?

A personal information controller refers to a person or organization who controls the collection, holding, processing, or use of personal information. This definition explicitly includes a person or organization who instructs another entity to collect, hold, process, use, or disclose personal information on their behalf. However, it specifically excludes a person or organization that merely performs such functions as instructed by another entity. It also excludes individuals who process personal data strictly in connection with their personal, family, or household affairs under Section 3 Data Privacy Act. “(h) Personal information controller refers to a person or organization who controls the collection, holding, processing or use of personal information, including a person or organization who instructs another person or organization to collect, hold, process, use, transfer or disclose personal information on his or her behalf. The term excludes: (1) A person or organization who performs such functions as instructed by another person or organization; and (2) An individual who collects, holds, processes or uses personal information in connection with the individual’s personal, family or household affairs.” 21-May-26

About Nicolas and De Vega Law Offices

 Nicolas and De Vega Law Offices is a full-service law firm in the Philippines.  You may visit us at the 16th Flr., Suite 1607 AIC Burgundy Empire Tower, ADB Ave., Ortigas Center, 1605 Pasig City, Metro Manila, Philippines.  You may also call us at +632 84706126, +632 84706130, +632 84016392 or e-mail us at [email protected]. Visit our website https://ndvlaw.com/.