NPC to propose amendments to Data Privacy Act

The National Privacy Commission (NPC) is set to propose amendments to the Data Privacy Act which would allow NPC to just issue fines for violations of the law.

NPC commissioner Raymond Liboro told reporters the power to just issue fines would be similar to other data privacy bodies in other countries.

“Any law is not perfect so, we are looking at some areas of the law, the power to issue fines,” he said.

Depending on the violation, the Data Privacy Act imposes penalties such as imprisonment of six months to seven years, and fines amounting to P100,000 up to P5 million.

Liboro said under the current set-up, there is no middle ground.

He said other bodies in other countries could impose just fines for violation.

He cited the example of the British Information Commission Office which imposed a fine on Facebook for the breach of data protection law after data of users were improperly accessed by consultancy Cambridge Analytica.

“Our legal team, hopefully this year, will be able to file the amendments,” he said.

He said the NPC has informed Sen. Juan Edgardo Angara, as well as Tarlac Rep. Victor Yap, who serve as chair of the information and communications technology committee, of the agency’s plan to push for amendments.

“They know. I told them we will be coming up with (amendments). It’s a continuing process, law reform,” he said.

The NPC, which serves as the country’s privacy watchdog, is mandated to administer and implement the Data Privacy Act of 2012.

It also seeks to monitor and ensure compliance of the country with international standards set for data protection.