NPC summons Grab to a meeting

The National Privacy Commission (NPC) has summoned Grab to a meeting next week over its acquisition of rival Uber’s TNV (transport network vehicle) and food delivery businesses in Southeast Asia business to answer concerns on the security in the processing of Filipino drivers’ and users’ data. NPC Commissioner Raymund Enriquez Liboro has put to task the responsibility on Grab as it becomes the country’s biggest, if not the lone TNV provider in the Philippines after it acquired Uber’s southeast Asia business. “We want Grab to demonstrate that they could ‘walk the talk’ when it comes to protecting personal data and upholding the data privacy rights of its drivers and users,” said Liboro. In particular, the NPC would like Grab to enlighten the Commission on this “sale” particularly its provision on the processing of Filipino drivers’ and users’ data and the measures they take in protecting these data. Liboro also noted that this sale of Uber in southeast Asia does not affect its ongoing investigation into past Uber breaches that involved Filipino users. “This investigation is continuing and a report would be out soon,” he said. On Tuesday, both Uber and Grab issued public statements announcing the sale of Uber’s TNV and food delivery business in Southeast Asia to Grab. This means that Uber service will no longer be available in Southeast Asia including the Philippines, from 8 April 2018. Shortly after these public statements, Grab, through counsel Atty. John Paul Nabua assured the NPC of their continued cooperation and compliance with Philippine data privacy and protection laws. Grab also declared to the Commission that there will be no sharing of any user data between Uber and Grab. Uber users and drivers will be required to register anew with Grab to allow them to use the Grab TNV platform. (BCM)