NPC PUBLIC ADVISORY: REMINDER TO ALL DATA SUBJECTS REGARDING THE PROHIBITED PRACTICE OF REGISTERING SIM CARDS FOR THE PURPOSE OF SALE AND STEPS TO ENSURE PERSONAL DATA PROTECTION
The National Privacy Commission (NPC), as the sole data privacy authority of the country
mandated to enforce the provisions of the Data Privacy Act of 2012, reminds all concerned
data subjects about the serious ramifications associated with registering Subscriber Identity
Module (SIM) cards for the primary intention of selling them.
Recent developments have drawn our attention to alarming instances wherein certain
individuals, ostensibly acting as agents of malevolent entities, are enticing unsuspecting
individuals with monetary offers (averaging Php1,000.00) in exchange for SIM cards that have
been registered. This practice is not only prohibited under the SIM Registration Act (RA No.
11934) but it also places data subjects in a vulnerable position, exposing them to potential legal
repercussions, risks and harms if a SIM card, registered in their name, is misused for illicit
activities.
To this end, the NPC issues this public advisory on how to protect yourself as a subscriber
and data subject by considering these steps:
- Awareness: Educate yourself about the legal and privacy implications of registering
and selling SIM cards. Familiarize yourself with the Data Privacy Act of 2012 and its
provisions. - Vigilance: Be cautious of unsolicited offers to purchase your registered SIM card.
Scrutinize the intentions behind such offers and verify the credibility of the individuals
making them. - Report Suspicious Activities: If you are approached with offers to sell your registered
SIM card, report such incidents to your telecommunications service provider. Timely
reporting can help prevent potential misuse of your personal data. - Reporting Change of Information with the Telecommunications Companies
(Telcos): Promptly report any changes in the information of the subscriber (end-user)
so that the telcos can update their database in accordance with the SIM Registration
Act. - Identity Verification: Before transferring ownership of a SIM card, ensure that proper
identity verification procedures are followed. This can help prevent unauthorized
transfers - Legal Compliance: If you decide to sell or transfer a registered SIM card, adhere to the
legal requirements for reporting such transactions as required under the SIM
Registration Act.
Pursuant to the provisions of the SIM Registration Act, severe penalties shall be imposed upon
those involved in the sale or transfer of a registered SIM without complying with required
registration or without properly informing the telco concerned. More specifically, under
Section 11 (g) of the SIM Registration Act, individuals found guilty of selling or transferring a
registered SIM card without complying with the required registration under Section 6 of the
same law may be subject to imprisonment ranging from six (6) months to six (6) years, or a
fine of One hundred thousand pesos (₱100,000.00) to Three hundred thousand pesos
(₱300,000.00), or both.
The NPC earnestly urges all data subjects to take heed of this advisory and to remain vigilant
against participating in any actions that may put at risk their personal data. The NPC remains
committed to safeguarding the data privacy rights of every Filipino citizen, and we stand
ready to take appropriate action against those who disregard and violate the Data Privacy Act
of 2012 and related issuances.
