Firm flagged for privacy breach

MANILA, Philippines — A lending company has been ordered to stop processing the personal data of its 6,000 borrowers after it posted their names online.

The National Privacy Commission (NPC) issued a cease and desist order against the Batangas-based Familyhan Credit Corp. after investigation showed it violated the Data Privacy Act of 2012.

The NPC also ordered the company to take down its master database online to prevent unauthorized access by the public.

The database stores sensitive information of the company’s clients such as their names, passport numbers, and email and residential addresses.

Copies of the cease and desist order have been sent to the personal addresses of the officers and board members of the Familyhan – Acer John Angeles, Maureen Atienza, May Reyes, Voltaire Villafuerte and Jessa Rene Villafuerte.

Based on the complaints, the NPC said there was sufficient ground showing the company violated the law when it gave the public access to personal and sensitive information of its clients.

As of yesterday, the database remained accessible online.

The company and its officers were given 10 days to comment on the cease and desist order.