DECISIONS

In the exercise of its quasi-judicial function, the National Privacy Commission may recommend to the Department of Justice (DOJ) the prosecution and imposition of penalties specified in Sections 25 to 29 of the Data Privacy Act of 2012.

NPC 20-317 and 20-318	GBA v. SBG and LPL v. SBG Tags: Consent, Unauthorized Processing (Section 25), Legitimate Interest (Section 12 (f)), Proportionality
NPC 21-010 to NPC 21-015	MVC, et al. v. DSL Tags: Compliance with a Legal Obligation (Section 12 (c)), Jurisdiction, Motion for Reconsideration, Unauthorized Disclosure (Section 32)
NPC 21-167	MAF v. Shopee Philippines, Inc. Tags: Unauthorized Purposes (Section 28), Unauthorized Disclosure (Section 32), Proportionality, Principle of Accountability, Personal Information Processor, Legitimate Interest (Section 12 (f), Nominal Damages
NPC SS 22-001 and NPC SS 22-008	In re: Commission on Elections Tags: Unauthorized Access or Intentional Breach (Section 29), Sua Sponte Investigation, Breach Notification, Burden of Proof, Principle of Accountability, Security of Personal Information, Personal Information Controller, Personal Information Processor, Substantial Evidence, Concealment of Security Breaches Involving Sensitive Personal Information (Section 30); Scope of the DPA (Section 4); Sensitive Personal Information
NPC 19-030 and NPC 19-132	CL vs. DDZ and DM vs. DDZ Tags: Exhaustion of Remedies (Sec. 4 NPC Circular No. 16-04) ; Legitimate Interest ; Unauthorized Access or Intentional Breach (Section 29)
NPC 18-205	In Re: Medicard Philippines, Inc Tags: Compliance with the NPC Circular 16-03 (Personal Data Breach Management)
NPC SS 21-005	In Re: Oriente Express Techsystem Corporations (CASHALO) and its Responsible Officers Tags: Failure to substantiate allegations, transparency, legitimate purpose, proportionality, Unauthorized processing of personal information and sensitive personal information, Guidelines on the processing of personal data for loan-related transactions
NPC 18-142	MSH vs. RSF & TCC Tags: Indemnification, Right to rectification
NPC 19-278	JRO vs. MSMI Tags: Exception to the exhaustion of administrative remedies, Legitimate interest, Criteria for lawful processing of personal information
NPC 21-006	Wefund Lending Corp. Tags: Unauthorized Processing (Section 25), Legitimate interest (Section 12 f)), Extent of Liability (Section 34), Substantial Evidence, Gross Negligence, Sua Sponte Investigation, Temporary Ban, Legitimate Purpose, Proportionality, Transparency
NPC 21-096	AC v. ISG Tags: Outright Dismissal, Legitimate Purpose, Proportionality, CCTV Guidelines, Form and Content of the Complaint
NPC 21-064	GSS v Global Dominion Financing Inc. Tags: Outright Dismissal, Exhaustion of Remedies
NPC 19-465	GJJ v. Easy Peso Tags: Burden of proof, Electronic Evidence, Unauthorized Processing (Section 25), Contract of Adhesion
NPC 21-016	EDF v. BPI Tags: Burden of proof, Substantial Evidence
NPC 21-031	JCB v. FRL Tags: Exhaustion of remedies, Form and contents of the Complaint, Outright Dismissal, Defense of Legal Claims (Section 13 (f)), Malicious Disclosure (Section 31), Unauthorized Disclosure (Section 32)
NPC 21-032	JDB v. JME Tags: Exhaustion of remedies, Form and contents of the Complaint, Outright Dismissal, Defense of Legal Claims (Section 13 (f)), Malicious Disclosure (Section 31), Unauthorized Disclosure (Section 32)
NPC 19-142	MLF v. Grab Philippines Tags: Outright dismissal, Unauthorized Purposes (Section 28)
NPC CN 19-501	MEC vs. Robocash Finance Corporation Tags: Exception to the Exhaustion of Remedies; Failure to substantiate allegations; Substantial evidence.
NPC CN 19-187	JGO vs. Fynamics Lending, Inc (Pondo Peso) Tags: Quitclaim.
CID 18-D-009	JLB vs. Security Bank Corporation Tags: Substantial Evidence; Burden of proof and burden of evidence; Unauthorized Disclosure; Combination or Series of Acts; Security of Personal Information; Subcontract of Personal Information.
NPC 19-569	MPM vs. U-Peso.Ph Lending Corporation (Pera4U) Tags: Failure to substantiate allegations; Temporary Ban on Processing Personal Data.
NPC 18-074	ECV vs. CVF Tags: Exhaustion of Remedies, Unauthorized Processing of Sensitive Personal Information.
NPC 19-0048	GJ s. VMJ & MTP Tags: Exhaustion of Remedies, Burden of Proof, Legitimate Interest.
NPC 21-086	RTB v. East West Banking Corporation Tags: Fulfillment of a Contract (Section 12 (b))
NPC 19-134	VVC v. CJB Tags: Exhaustion of remedies, Consent, Contract of Adhesion, Unauthorized Processing (Section 25), Unauthorized Disclosure (Section 32)
NPC 18-109	ACN v DT Tags: Unauthorized Access or Intentional Breach (Section 29), Malicious Disclosure (Section 31)
CID 18-D-012	JBD vs. JI and VVV Tags: Unauthorized Processing (Section 25)
NPC 18-010	RLA V. PLDT Enterprise Tags: Personal Information Controller; Personal Information Processor; consent; legal obligation; good faith; processing for unauthorized purposes; unauthorized disclosure; gross negligence.
12-17-2020	FAT vs. XXX Tags: Exhaustion of remedies, Unauthorized disclosure of personal information, Rendition of Decision, Outright Dismissal.
19-653	BGM vs. IPP Tags: Data subject’s right to access, criteria for lawful processing of personal information, legitimate interest, purpose, and proportionality, DPA should not be seen as curtailing the practice of law in litigation, restitution for the aggrieved party, and nominal damages.
NPC 19-910	IN RE: FLI OPERATING ABC ONLINE LENDING APPLICATION Tags: Transparency, Proportionality, Online Lending Application, Sua Sponte Investigation, Unauthorized Processing (Section 25), Incurring Criminal Liability, Consent, Retention of Personal Data, Personal Information Controller, Principle of Accountability, Processing for Unauthorized Purposes (Section 28), Extent of Liability (Section 34), Gross Negligence
NPC 19-621	AMP v HXXX Tags: Transparency, Online Lending Application, Substantial Evidence, Temporary Ban, Consent
11-19-2020	SCM vs. XXX Tags: Data privacy rights, Section (4) of the Data Privacy Act, unlawful processing, General Data Principles, privacy policy.
NPC 19-528	MNLC vs PXXX Corporation Tags: Proportionality, Jurisdiction, Exhaustion of Remedies, Consent, Legitimate Interest (Section 12 (f)), Unauthorized Processing (Section 25), Extent of Liability (Section 34), Nominal Damages
09-21-2020	CBI vs. XXX Tags: Burden of Evidence, Burden of Proof, Substantial Proof, Compliance to DPA, Rendition of Decision
07-23-2020	ECA vs. XXX Tags: Right to Data Privacy, Criteria for Lawful Processing of Personal Information, Appointing a DPO, Award, Nominal Damages, Principle of Transparency, Rendition of Decision, Unauthorized Processing
CID 17-005a	ECB vs. SSMSM Tags: Disclosure of the detailed record of calls to a certain mobile user.
NPC 19-1221	RABD v FXXX Tags: Online Lending Application, Sua Sponte Investigation, Substantial Evidence
NPC 19-1222	RBD vs. FCASH GLOBAL LENDING, INC. (FAST CASH) Tags: Online Lending Application, Sua Sponte Investigation, Substantial Evidence
06-18-2020	JGO vs. XXX Tags: Amicable settlement, Quitclaim .
NPC 18-141	MHH v VCF SPFS Tags: Substantial Evidence, Intent to Process
NPC 19-450	JRG v CXXX Tags: Transparency, Substantial Evidence, Temporary Ban, Consent
NPC 19-498	JVA v UXXX Tags: Transparency, Consent, Substantial Evidence, Temporary Ban
NPC 19-498	JVA vs. U-PESO.PH LENDING CORPORATION (UPESO) Tags: Transparency Online Lending Application, Jurisdiction, Consent, Substantial Evidence, Temporary Ban
06-09-2020	BEM vs. GFC Tags: substantial evidence, quantum of proof required, rendition of decision
NPC 18-152	MRS vs. NATIONAL CONCILIATION AND MEDIATION BOARD (NCMB) AND DEPARTMENT OF LABOR AND EMPLOYMENT (DOLE) Tags: Exhaustion of remedies
NPC 18-155	HNT vs. EASTWEST BANK Tags: Alternative Dispute Resolution
NPC 18-066	B.Q.N. vs NUQ Inc Tags: Not all processing and disclosure of personal information are violations of the DPA, criteria for lawful processing, processing of personal information shall be permitted only if not otherwise prohibited by law, processing of information is permissible if the processing is necessary for compliance with a legal obligation to which the personal information controller is subject, principles of transparency, legitimate purpose, and proportionality
CID 18-E-040	KGR v. BB et al. Tags: Personal Information Controller, General Data Privacy Principles, Processing, Substantial Evidence
NPC 17-015	ID Y.S. v DS BANK Tags: Personal Data Breach Management, Who may file a complaint, Rights of Data Subjects
CID 17-K-003	KRL vs. TRINITY UNIVERSITY OF ASIA, AA, MC, NCB, RG GV, GCT, RR, MR, PB Tags: Exhaustion of Remedies, Alternative Dispute Resolution, Privacy Impact Assessment, Accessing Due to Negligence (Section 26), Defense of Legal Claims (Section 13(f)) , Substantial Evidence
CID 18-F-064	RBG vs. CB Tags: Substantial Evidence
NPC 19-258	CPM vs. CASHWAGON Tags: Outright Dismissal
08-15-2019	In Re: DATA BREACH INVOLVING THE COMELEC DATA PROCESSING SYSTEM IN WAO, LANAO DEL SUR Tags: Safekeeping, Concealment of Data Breach, Documentation
NPC 17-047	JV vs. JR Tags: Form and contents of the Complaint, Outright Dismissal
NPC 17-018	EA and TA v EJ Tags: Legitimate purpose, Proportionality, Unauthorized Processing (Section 25), Processing, Defense of Legal Claims (Section 13 (f))
	IBC vs. PBI Tags: Lawful Processing of Personal Information, Phishing, Right to Rectification, Right to Correct Personal Information

DECISIONS

REPUBLIC OF THE PHILIPPINES

ABOUT GOVPH

GOVERNMENT LINKS

NPC PRIVACY NOTICE

CONTACT US