PAW 2024: PH celebrates inclusivity and diversity in data privacy

Pursuant to Proclamation No. 527, s. 2018, the National Privacy Commission (NPC) led the celebration of Privacy Awareness Week (PAW) 2024 with the theme “Data Privacy for All: Embracing Inclusivity and Diversity.” This year’s theme emphasized our commitment to ensuring that data privacy is accessible and relevant to everyone, regardless of background, age, or technological proficiency. The highlight of this year’s PAW was the 7th National Data Privacy Conference, held on 30 May 2024, at Solaire Resort in Parañaque City, featuring Senator Grace L. Poe as the keynote speaker.

Senator Poe heeds the NPC’s clarion call for embracing inclusivity and diversity. “Individuals should have control over their data. Informed consent should be a prerequisite as to how their information is collected, used, and processed,” she added. The Senator also mentioned that the bills she authored and sponsored placed a strong emphasis on data privacy and protection.

Privacy Commissioner Atty. John Henry D. Naga delivered his Commissioner’s Report, emphasizing the crucial role of inclusivity and diversity in upholding the fundamental human right to privacy for everyone. “We aim to make sure that everyone benefits from the advancements in digitalization that President Ferdinand R. Marcos Jr. envisions,” Privacy Commissioner Naga stated.

To make this a reality, the NPC spearheaded innovative programs, policy development, and collaborative engagement in 2023.

Regulatory and Enforcement Excellence in 2023

To provide guidance and enforcement mechanisms for personal information controllers (PICs), personal information processors (PIPs), and data subjects, the NPC issued seven (7) circulars covering personal data security in both government and private sectors, guidelines on identification cards, consent, legitimate interest, schedule of fees and charges, as well as initiatives such as the Data Privacy Competency Program and prerequisites for the Philippine Privacy Mark Certification Program. Additionally, the NPC issued an advisory on deceptive design patterns.

“The Commission is continuously proposing a bill to amend the DPA. These amendments include clarifying the scope, definitions, powers of the Commission, and lawful criteria for processing, among others,” Privacy Commissioner Naga stated.

The NPC is also persistent in strengthening its efforts to ensure PICs’ and PIPs’ compliance with the DPA, its IRR, and NPC issuances. To date, the Commission has issued 6,413 Certificates and Seals of Registration and 757 Sworn Declarations on Registration Exemption. Furthermore, 58 on-site visits and 805 Privacy Sweeps were conducted, and 22 Notice of Document Submissions, 62 show cause orders, and 68 warning letters were issued.

In terms of personal data breach handling, the Commission addressed a total of 421 breach notifications caused by hacking incidents, lost documents, theft, personnel error, phishing, and unauthorized access and disclosure, among others. The NPC also instituted eight sua sponte investigations against PICs for possible data privacy violations.

The NPC also strengthened its presence in the global privacy stage – becoming the first Fee-Funded Secretariat of the Global Privacy Assembly (GPA). It consistently collaborates with its data privacy counterparts worldwide, with six (6) Memorandum of Understanding (MOUs) signed with the United Kingdom’s Information Commissioner’s Office, Singapore’s Personal Data Protection Commission, and Hong Kong’s Office of the Privacy Commissioner for Personal Data.

“These accomplishments are testaments that the Commission diligently exercised its powers under the law against any party found in violation of the Data Privacy Act of 2012, and that the Commission is without fear in continuing its obligations to the Filipino people,” Privacy Commissioner Naga proudly stated. “This 2024, I assure you that a privacy-empowered and a digitally inclusive Philippines is in our immediate future, through the issuance of stricter rules and guidelines,” he added.

In his report, Privacy Commissioner Naga announced that the Commission will launch a Compliance and Security Monitoring Command Center this year. “Through the Command Center, our compliance and security activities will be digitized in order to provide cybersecurity measures and effectively respond to NEDA’s directive of adopting programs and projects geared towards economic development,” he declared.

PAW 2024 gathered panelists from both public and private sector to discuss a range of data privacy issues and concerns, exchanging insights and best practices in handling personal data. They explored topics such as achieving inclusivity in data privacy practices, challenges and best practices in protecting data privacy rights of vulnerable individuals, cultivating effective data privacy awareness for children, and ensuring secure digital inclusivity for all.

PAW Awards 2024

PAW Awards 2024 celebrates individuals and organizations that have excelled in the field of data privacy and contributed to the promotion of a data privacy culture in the Philippines. It is part of the NPC’s endeavor to acknowledge its stakeholders’ compliance with the DPA and to inspire PICs, PIPs, DPOs, and data privacy advocates in their efforts to strengthen data privacy and protection in the country.

The Privacy Initiative of the Year was awarded to La Verdad Christian College for its “Know Your Rights, Know Your Responsibilities” initiative, while the Privacy Management Program Award was presented to Waterfront Hotels and Casinos.

Ms. Kimberly D. Ramones was recognized as the Privacy Advocate of the Year, and Ms. Charlette Donna D. Juaton of the Davao Regional Medical Center was named Data Protection Officer of the Year.

For more information, visit https://privacy.gov.ph/paw2024/. The full recording of PAW 2024 is available for replay on NPC’s official Facebook page (https://fb.watch/soOlW8Eb0c/) and YouTube channel (https://www.youtube.com/watch?v=c3mJ3Yc_j8s).

###