Firms urged to comply with data protection laws

THE National Privacy Commission (NPC) has issued a stern reminder to all business owners processing personal data of clients, customers and employees to register with the commission.

NPC Data Security and Compliance Office Director Aubin Arn Nieva said on Monday that businesses who fall below the registration threshold are still required to submit a declaration for exemption. Failure to comply will result in penalties.

The directive specifies that businesses with 250 or more employees, those with 1,000 or more customers, or those collecting personal data that pose significant risks to the rights and freedoms of data subjects must register with the NPC.

This requirement was communicated through a recent public announcement, stressing the importance of compliance to ensure the protection of personal data.

«Failure to comply will not be tolerated. Even if your business does not meet these thresholds, you must submit a declaration for exemption,» said Nieva.

Noncompliance will result in corresponding sanctions and penalties of up to P5 million.

Furthermore, the NPC encouraged the public to report any business collecting personal data without the official NPC seal of registration. Reports can be made to Privacy Patrol via the NPC website (https://privacy.gov.ph/)

Last month, the commission warned establishments that are non-compliant with the Data Privacy Act of 2012 (DPA) and issued a show-cause order to 56 establishments for failing to present their seal of registration with the DPA.

During an on-the-spot privacy sweep and compliance check at independent retail or service stores, boutiques, pop-up booths, kiosks, or stalls within a mall in Parañaque City, only 38 establishments were said to be compliant with the DPA and other issuances of the commission.

Privacy Commissioner John Henry Naga said that corresponding fines will be imposed, amounting to a maximum of P5 million per violation, if reasons for non-registration are deemed unacceptable by the NPC.

This move by the NPC underscores the importance of data privacy and the commission's commitment to enforcing strict compliance among businesses handling personal information.