Philippines implements data protection rules

Under the Data Privacy Act of 2012 the National Privacy Commission administers and implements the Data Privacy Act. It has now established implementing regulations.  These cover:

• Data Privacy Principles (e.g. Transparency, Legitimate Purpose and Proportionality)
• Processing of Personal Data (e.g. purposes, methods, data integrity, data sharing)
• Security Measures for Data Protection (privacy officers, Accountability and Transparency, Physical security)
• Government Data Security
• Rights of Data Subjects
• Data Breach Notifications to the Commission
• Rules on Outsourcing and Subcontracting
• Registration, Adminsitration and Penalties

This comes after a massive recent breach - details here. Companies will need to review their operations immediately for compliance.