DECISIONS
In the exercise of its quasi-judicial function, the National Privacy Commission may recommend to the Department of Justice (DOJ) the prosecution and imposition of penalties specified in Sections 25 to 29 of the Data Privacy Act of 2012.
NPC 20-317 and 20-318 |
Tags: Consent, Unauthorized Processing (Section 25), Legitimate Interest (Section 12 (f)), Proportionality
|
NPC 21-010 to NPC 21-015 |
Tags: Compliance with a Legal Obligation (Section 12 (c)), Jurisdiction, Motion for Reconsideration, Unauthorized Disclosure (Section 32)
|
NPC 21-167 |
MAF v. Shopee Philippines, Inc.
Tags: Unauthorized Purposes (Section 28), Unauthorized Disclosure (Section 32), Proportionality, Principle of Accountability, Personal Information Processor, Legitimate Interest (Section 12 (f), Nominal Damages
|
NPC SS 22-001 and NPC SS 22-008 |
In re: Commission on Elections
Tags: Unauthorized Access or Intentional Breach (Section 29), Sua Sponte Investigation, Breach Notification, Burden of Proof, Principle of Accountability, Security of Personal Information, Personal Information Controller, Personal Information Processor, Substantial Evidence, Concealment of Security Breaches Involving Sensitive Personal Information (Section 30); Scope of the DPA (Section 4); Sensitive Personal Information
|
NPC 19-030 and NPC 19-132 |
Tags: Exhaustion of Remedies (Sec. 4 NPC Circular No. 16-04) ; Legitimate Interest ; Unauthorized Access or Intentional Breach (Section 29)
|
NPC 18-205 |
In Re: Medicard Philippines, Inc
Tags: Compliance with the NPC Circular 16-03 (Personal Data Breach Management)
|
NPC SS 21-005 |
In Re: Oriente Express Techsystem Corporations (CASHALO) and its Responsible Officers
Tags: Failure to substantiate allegations, transparency, legitimate purpose, proportionality, Unauthorized processing of personal information and sensitive personal information, Guidelines on the processing of personal data for loan-related transactions
|
NPC 18-142 |
Tags: Indemnification, Right to rectification
|
NPC 19-278 |
Tags: Exception to the exhaustion of administrative remedies, Legitimate interest, Criteria for lawful processing of personal information
|
NPC 21-006 |
Tags: Unauthorized Processing (Section 25), Legitimate interest (Section 12 f)), Extent of Liability (Section 34), Substantial Evidence, Gross Negligence, Sua Sponte Investigation, Temporary Ban, Legitimate Purpose, Proportionality, Transparency
|
NPC 21-096 |
Tags: Outright Dismissal, Legitimate Purpose, Proportionality, CCTV Guidelines, Form and Content of the Complaint
|
NPC 21-064 |
GSS v Global Dominion Financing Inc.
Tags: Outright Dismissal, Exhaustion of Remedies
|
NPC 19-465 |
Tags: Burden of proof, Electronic Evidence,
Unauthorized Processing (Section 25), Contract of Adhesion |
NPC 21-016 |
Tags: Burden of proof, Substantial Evidence |
NPC 21-031 |
Tags: Exhaustion of remedies, Form and contents of the Complaint, Outright Dismissal, Defense of Legal Claims (Section 13 (f)), Malicious Disclosure (Section 31), Unauthorized Disclosure (Section 32) |
NPC 21-032 |
Tags: Exhaustion of remedies, Form and contents of the Complaint, Outright Dismissal, Defense of Legal Claims (Section 13 (f)), Malicious Disclosure (Section 31), Unauthorized Disclosure (Section 32) |
NPC 19-142 |
Tags: Outright dismissal, Unauthorized Purposes (Section 28) |
NPC CN 19-501 |
MEC vs. Robocash Finance Corporation
Tags: Exception to the Exhaustion of Remedies; Failure to substantiate allegations; Substantial evidence. |
NPC CN 19-187 |
JGO vs. Fynamics Lending, Inc (Pondo Peso)
Tags: Quitclaim. |
CID 18-D-009 |
JLB vs. Security Bank Corporation
Tags: Substantial Evidence; Burden of proof and burden of evidence; Unauthorized Disclosure; Combination or Series of Acts; Security of Personal Information; Subcontract of Personal Information. |
NPC 19-569 |
MPM vs. U-Peso.Ph Lending Corporation (Pera4U)
Tags: Failure to substantiate allegations; Temporary Ban on Processing Personal Data. |
NPC 18-074 |
Tags: Exhaustion of Remedies, Unauthorized Processing of Sensitive Personal Information. |
NPC 19-0048 |
Tags: Exhaustion of Remedies, Burden of Proof, Legitimate Interest. |
NPC 21-086 |
RTB v. East West Banking Corporation
Tags: Fulfillment of a Contract (Section 12 (b)) |
NPC 19-134 |
Tags: Exhaustion of remedies, Consent, Contract of Adhesion, Unauthorized Processing (Section 25), Unauthorized Disclosure (Section 32) |
NPC 18-109 |
Tags: Unauthorized Access or Intentional Breach (Section 29), Malicious Disclosure (Section 31) |
CID 18-D-012 |
Tags: Unauthorized Processing (Section 25) |
NPC 18-010 |
Tags: Personal Information Controller; Personal Information Processor; consent; legal obligation; good faith; processing for unauthorized purposes; unauthorized disclosure; gross negligence. |
12-17-2020 |
Tags: Exhaustion of remedies, Unauthorized disclosure of personal information, Rendition of Decision, Outright Dismissal. |
19-653 |
Tags: Data subject’s right to access, criteria for lawful processing of personal information, legitimate interest, purpose, and proportionality, DPA should not be seen as curtailing the practice of law in litigation, restitution for the aggrieved party, and nominal damages. |
NPC 19-910 |
IN RE: FLI OPERATING ABC ONLINE LENDING APPLICATION
Tags: Transparency, Proportionality, Online Lending Application, Sua Sponte Investigation, Unauthorized Processing (Section 25), Incurring Criminal Liability, Consent, Retention of Personal Data, Personal Information Controller, Principle of Accountability, Processing for Unauthorized Purposes (Section 28), Extent of Liability (Section 34), Gross Negligence |
NPC 19-621 |
Tags: Transparency, Online Lending Application, Substantial Evidence, Temporary Ban, Consent |
11-19-2020 |
Tags: Data privacy rights, Section (4) of the Data Privacy Act, unlawful processing, General Data Principles, privacy policy. |
NPC 19-528 |
Tags: Proportionality, Jurisdiction, Exhaustion of Remedies, Consent, Legitimate Interest (Section 12 (f)), Unauthorized Processing (Section 25), Extent of Liability (Section 34), Nominal Damages |
09-21-2020 |
Tags: Burden of Evidence, Burden of Proof, Substantial Proof, Compliance to DPA, Rendition of Decision |
07-23-2020 |
Tags: Right to Data Privacy, Criteria for Lawful Processing of Personal Information, Appointing a DPO, Award, Nominal Damages, Principle of Transparency, Rendition of Decision, Unauthorized Processing |
CID 17-005a |
Tags: Disclosure of the detailed record of calls to a certain mobile user. |
NPC 19-1221 |
Tags: Online Lending Application, Sua Sponte Investigation, Substantial Evidence |
NPC 19-1222 |
RBD vs. FCASH GLOBAL LENDING, INC. (FAST CASH)
Tags: Online Lending Application, Sua Sponte Investigation, Substantial Evidence |
06-18-2020 |
Tags: Amicable settlement, Quitclaim . |
NPC 18-141 |
Tags: Substantial Evidence, Intent to Process |
NPC 19-450 |
Tags: Transparency, Substantial Evidence, Temporary Ban, Consent |
NPC 19-498 |
Tags: Transparency, Consent, Substantial Evidence, Temporary Ban |
NPC 19-498 |
JVA vs. U-PESO.PH LENDING CORPORATION (UPESO)
Tags: Transparency Online Lending Application, Jurisdiction, Consent, Substantial Evidence, Temporary Ban |
06-09-2020 |
Tags: substantial evidence, quantum of proof required, rendition of decision |
NPC 18-152 |
Tags: Exhaustion of remedies |
NPC 18-155 |
Tags: Alternative Dispute Resolution |
NPC 18-066 |
Tags: Not all processing and disclosure of personal information are violations of the DPA, criteria for lawful processing, processing of personal information shall be permitted only if not otherwise prohibited by law, processing of information is permissible if the processing is necessary for compliance with a legal obligation to which the personal information controller is subject, principles of transparency, legitimate purpose, and proportionality |
CID 18-E-040 |
Tags: Personal Information Controller, General Data Privacy Principles, Processing, Substantial Evidence |
NPC 17-015 |
Tags: Personal Data Breach Management, Who may file a complaint, Rights of Data Subjects |
CID 17-K-003 |
KRL vs. TRINITY UNIVERSITY OF ASIA, AA, MC, NCB, RG GV, GCT, RR, MR, PB Tags: Exhaustion of Remedies, Alternative Dispute Resolution, Privacy Impact Assessment, Accessing Due to Negligence (Section 26), Defense of Legal Claims (Section 13(f)) , Substantial Evidence |
CID 18-F-064 |
Tags: Substantial Evidence |
NPC 19-258 |
Tags: Outright Dismissal |
08-15-2019 |
In Re: DATA BREACH INVOLVING THE COMELEC DATA PROCESSING SYSTEM IN WAO, LANAO DEL SUR Tags: Safekeeping, Concealment of Data Breach, Documentation |
NPC 17-047 |
Tags: Form and contents of the Complaint, Outright Dismissal |
NPC 17-018 |
Tags: Legitimate purpose, Proportionality, Unauthorized Processing (Section 25), Processing, Defense of Legal Claims (Section 13 (f)) |
Tags: Lawful Processing of Personal Information, Phishing, Right to Rectification, Right to Correct Personal Information |