In an episode of PrivacyEspresso, SyCipLaw Partner and data privacy expert Franco G. Larcina tackles the latest developments on the privacy framework in the Philippines.
Mr. Larcina provides a background on the data privacy regime in the country, which is primarily governed by the Data Privacy Act of 2012 or Republic Act 10173. He cites Circular No. 2022-04 issued by the National Privacy Commission (NPC) in December 2022 that came in effect on January 11, 2023, and the key elements and updates this has brought to the abovementioned framework.
He highlights some key changes and updates under the latest Circular:
- a new system for the registration of Data Processing Systems (DPS) via the NPC registration system (NPCRS)
- upon registration completion, the issuance of a seal of registration by the NPC that must be displayed at the main entrance of a personal information controller’s (PIC) or personal information processor’s (PIP) place of business, office or at the most prominent area that ensures visibility to all data subjects;
- display of the seal of registration on the PIC’s or PIP’s website or, if it is a global website, on the webpage dedicated to the Philippines;
- mandatory registration of PIPs and PICs operating in the Philippines if they meet any of the following criteria: (a) employ at least 250 employees; (b) process the sensitive personal information of at least 1,000 persons; (c) process data that will most likely pose a risk to the rights and freedoms of their data subjects; (d) their processing involves automated decision-making or profiling.
- new rules for the appointment of Data Protection Officers (DPOs).
Watch the full episode here or on YouTube.
“PrivacyEspresso” is a series of short videos on data privacy news and updates all over the world by PrivacyRules. PrivacyRules is a worldwide professional alliance of data privacy experts with legal and technology disciplines.