Implementing rules for Data Privacy Act out

MANILA, Philippines – The National Privacy Commission (NPC) yesterday released the implementing rules and regulations (IRR) for the Data Privacy Act, a law seeking to protect personal information collected both by the government and the private sector in the Philippines.

The IRR was released two years after former president Benigno Aquino III signed the measure, which created the NPC and set the rules covering the processing of all types of personal information collected in the country.

“With the prevalent use of personal data in access devices, social media, smartphone apps as well as the delivery of basic services, it is extremely important that the public and organizations be made aware of the need to responsibly handle personal information,” privacy commissioner Raymund Liboro said.

“The rules were made with the citizen’s protection and the country’s progress in mind. Personal data are your personal assets that should be guarded. Collectively, they become a national asset too,” he added.

The IRR defined the mandate and organizational structure of the NPC, which will be attached to the newly created Department of Information and Communications Technology.

The commission was tasked to develop and constantly review rules and regulations covering data privacy in the country, as well as serve as an advisory body on matters affecting the protection of personal data.

NPC is also tasked to monitor compliance on the provisions of the law and adjudicate complaints and investigations on matters affecting personal data.

The implementing rules covered data privacy principles, lawful processing of personal data, security measures for protection of personal data, security of sensitive personal information in the government, rights of data subject and data breach notification.

It also outlined the penalties to be imposed, depending on the violation of the law.

A group previously lodged a complaint before the NPC against the Commission on Elections over the supposed leak of sensitive personal information of Filipino voters following the hack of the poll body’s website.