DECISIONS

In the exercise of its quasi-judicial function, the National Privacy Commission may recommend to the Department of Justice (DOJ) the prosecution and imposition of penalties specified in Sections 25 to 29 of the Data Privacy Act of 2012.

NPC 21-082	MBA vs. GoFluent Philippines, Inc. Tags: Section 25 Unauthorized Processing of Personal Information and Sensitive Personal Information, Section 28 Processing of Personal Information and Sensitive Personal Information for Unauthorized Purpose, Section 31 Malicious Disclosure, Section 32 Unauthorized Disclosure, Section 13, Principle of Proportionality, of Exhaustion of Remedies, Due Process, Forum Shopping, Privacy Violation, Cause of Action, Section 4(d), Nominal Damages
NPC 24-006	HCN vs. BDO Tags: Personal Information, Sensitive Personal Information, Legitimate Interest (Section12 (f), Protection of Lawful Rights and Interests in Court Proceedings Section 13(f), Scope of the DPA Section 4)
NPC 20-307	Spouses JGY and NTY v. BPI Family Savings Bank, Inc. Tags: Unauthorized disclosure; Section 32; Mortgage-loan; Contstraction Loan; Contractor-as-third party; Legitimate interest-section -12f; Loan Proceeds-release-info; Text-messages-disclosure; not-malicious-not-bad-faith; personal-information-in-loan-context
NPC 22-113	JBM vs. PPHI Tags: Section 32-Unauthorized-disclosure; Thirt-party-vs-internal-disclosure; Lawful-processing-section 12; Consent-section 13; Data-Privacy-Consent-form; marital-status-sensitive-personal-information; Contact-number-personal-information; Burden-of-proof-substantial-evidence; Dismissal-lack-of-substantial-evidence; Employee-processng-with-pic; Title-transfer-group-processing; Housing-developer-data-processing; Data-privacy-principles-transparency;
NPC 22-117	CJJ vs. JJS and JB Tags: Section-32- unauthorized-disclosure; Section-31-malicious-disclosure-not-proven; Journalistic-exemption- limits; Excessive-processing- section-11d; Facebook-live-public- disclosure; Identification- of-vawc-victim; RA-9262-confidentiality; Sensitive-information; Absence-of-consent; Pres; Data-subject-rights
NPC 22-237	MTS vs. Bank of the Philippine Islands Tags: Alleged-unauthorized-processing; Section-25; Access-due-to-negligence; Section-26; Online-banking-fraud; Vishing-voice-pishing; OTP-compromise; Mobile-key- activation; Multi-factor-authentication; Burden-of-proof- substantial-evidence; Cybersecurity-financial-sector
NPC 19-1234	FCG v. Unipeso Lending Company Inc. (Handy Loan) Tags: Personal Information (Section 3), Online Lending, Application, Mobile Numbers
NPC 19-1438	VMJR v. EBO Tags: Unauthorized Processing of Personal Information and Sensitive Personal Information (Section 25), Malicious Disclosure (Section 32), Post, Orders, Exhaustion of Remedies (Section 4), Protection of Lawful Rights and Interests in Court Proceedngs Section 13(f), Proportionality (Section 11), Nominal Damages (Section 37)
NPC 20-287	HEB vs DA Tags: Sec 4. Exhausion of Remedies; Sec 25. Unauthorized Processing of Personal Information and Sensitive Personal Information; Sec 32. Unauthorized disclosure; Sec 33. Combination of Series of Acts
NPC 21-085	JAA vs RB Tags: Sec 31. Malicious Disclosure; Sec 32. Unauthorized Disclosure
NPC 22-175	MEA vs MU Tags: Sec 31. Malicious Disclosure; Sec 3(h). Personal Information Controller
NPC 23-064, 23-065, 23-066	SSS vs RGC, SSS vs MTD, SSS vs FSD Tags: Sec 25. Unauthorized Processing of Personal Information and Sensitive Personal Information.
NPC 22-179	TSO vs ARM and HBM Tags: Exhausion of remedies; Sec 24. Disqualification by reason of privileged communication; Sec 12. Criteria for lawful processing of personal information; Sec 13. Sensitive personal information and privileged information; Sec 4. Withdrawal of fthe complaint
NPC 22-042	EFD vs AOD Tags: Sec 12. Citeria for lawful processing of personal information; Sec 13. Sensitive personal information and privileged information
NPC 19-1805	CBB vs AMS Tags: Sec 4. Exhausion of remedies; Sec 25. Unauthorized processing of personal information and sensitive personal information; Sec 12. Criteria for lawful processing of personal information; Sec 28. Processing of personal information and sensitive personal information for unauthorized purposes; Sec 13. Sensitive personal information and privileged information
NPC 19-1429	AMS vs CBB Tags: Unauthorized processing of personal information and sensitive personal information; Sec 12. Criteria for lawful processing of personal information; Sec 4. Guideline
NPC 22-064 and NPC 22-065	ALS vs Planters Bank and ALS vs China Bank Savings Tags: Sec 2. Exhaustion of remedies; Sec 16. Rights of the Data Subjects
NPC 19-1247	KDC vs Bank of the Philippine Islands Tags: Sec 1. Burden of proof and burden of evidence.
NPC 23-166	DCJ vs JCD Tags: Sec 2. Exhaustion of remedies; Sec 1. Burden of Proof and Burden of Evidence; Sec 29. Unauthorized Access on International Breach
NPC 22-066	ALS vs ALLIED BANK (NOW PHILIPPINE NATIONAL BANK) Tags: Sec 1. Burden of Proof and Burden of Evidence, Sec 2. Submission of Simultaneous memoranda
NPC SS 21-023	In The Matter of The Alleged Personal Data Breach of BDO Unibank, Inc. Tags: Accessing Personal Information and Sensitive Personal Information; Sec 30. Concealment of Security Breaches Involving Sensitive Personal Information; Sec 20. Security of Personal Information; Sec 11. When Notification is required.
NPC 19-1411	MIP v. Colliers International Philippines represented by RDR, EDS, JSA, and ALA Tags: Legitimate Interest (Section 12 (f)); Transparency; Other tags; Unauthorized Processing (Section 25); Unauthorized Disclosure (Section 32); Other tags; Fairness
NPC 21-251	AFV v. FRA Tags: Legitimate Interest (Section 12 (f)); Substantial Evidence; Other tags; Privacy Violation
NPC 22-257	ARG v. AMP Tags: Defense of Legal Claims (Section 13 (f)); Legitimate Interest (Section 12 (f)); Legitimate Purpose; Personal Information Controller; Proportionality; Unauthorized Processing (Section 25); Other tag; Sensitive Personal Information, General Privacy Principles
NPC 21-173	SLC v. CONCENTRIX PHILS. Tags: Burden of Proof; Other Tags; Security of Personal Information; Personal Information Controller; Nominal Damages; Damages; Evidence; Substantial Evidence; Other Tags; Improper Disposal (Section 27) Disputable Presumption
NPC 23-036	SPOUSES JG and AG vs SPOUSES CP and CC Tags: Sec 2. Exhaustion of Remedies; Sec 25. Unauthorized Processing of Personal Information and Sensitive Personal Information
NPC 18-018, 18-019, 18-020, & 18-027	JVT vs VMA, LAR vs VMA, CCW vs VMA, MLS vs VMA Tags: Sec 11. General Privacy Principles; Sec 12. Criteria for Lawful Processing of Personal Information; Sec 13. Sensitive Personal Information and Privileged Information
NPC 22-006	MDT vs BDO Unibank, Inc. Tags: Sec 26. Accessing Personal Information and Sensitive Personal Information Due to Negligence; Sec 32. Unauthorized Disclosure
NPC 22-201	JPV vs. Souley MD Services, Inc. Tags: Defense of Legal Claims (Section 13 (f)); Legitimate Purpose; Proportionality
NPC 22-112	AQM vs. PIT et al. Tags: Unauthorized Processing (Section 25), Legitimate Interest (Section 12(f)); Legitimate Purpose; Defense of Legal Claims (Section 13(f)); Proportionality
CID 18-K-200	CCMC vs. Quicklend, Inc. Tags: Blind Carbon Copy (BCC); Personal Data Breach; Notification; Security Incident Management Policies
NPC SS 21-008	Populus Lending Corporation (PESOPOP) and its Responsible Officers Tags: Unauthorized Processing (Section 25), Incurring Criminal Liability, Gross Negligence, Consent, Online Lending Application, Legitimate Purpose, and General Privacy Principles
NPC BN 21-111	EG vs JI, RO, and RR Tags: Unauthorized Disclosure; Data Subject Request for Access; Criteria for Lawful Processing of Personal Information; Sensitive Personal Information and Privileged Information; Legitimate Interest Three Part Test
NPC 18-004 and NPC 18-005	CA v. WestParc Condominium and VP v WestParc Condominium Tags: Nominal Damages; Right to Access; Evidence
NPC 17-065	RMA v. International Workplace Group PLC/Regus Tags: Substantial Evidence
NPC 19-531	RBB v. U-Peso. PH Lending Corp. (UPeso) Tags: Transparency; Substantial Evidence
NPC 17-K-001	JCR vs. Globe Telecom, Inc. Tags: Stored Information; Technical Security Measures
NPC 18-038	FGP vs Maersk Tags: Right to Damages; Right to Rectification
NPC 20-283	MAG vs. Bank of the Philippine Islands Tags: Substantial Evidence and Joint Obligation of Data Subjects and PICs
NPC 19-758 and NPC 19-1846	Spouses MCD, JJD v. Victorias Milling Company, et al Tags: Legitimate Interest (Section 12(f))
NPC 21-122	JBZ v. Metropolitan Bank & Trust Company Tags: Outsourcing Substantial Evidence Extent of Liability (Section 34) Damages
NPC 21-054	RGC v. JK Incorporated and Recovery, Inc. Tags: Unauthorized Access or Intentional Breach; Malicious Disclosure; Personal Information Processor
NPC 21-111	EG v. JI, RO, and RR Tags: Unauthorized Disclosure; Data Subject Request for Access; Criteria for Lawful Processing of Personal Information; Sensitive Personal Information and Privileged Information; Legitimate Interest; Three Part Test
NPC 19-1273	NFM v. BPI Tags: Technical Security Measures, Nominal Damages, Personal Information Controller, Substantial Evidence
NPC 20-026	JBA v. FNT and NNT Tags: Unauthorized Processing (Section 25), Substantial Evidence, Right to Erasure
NPC 22-012	RJC v. DL Tags: Burden of Proof, Defense of Legal Claims (Section 13 (f)), NPC Mandate, Proportionality, Transparency
NPC 20-317 and 20-318	GBA v. SBG and LPL v. SBG Tags: Consent, Unauthorized Processing (Section 25), Legitimate Interest (Section 12 (f)), Proportionality
NPC 21-010 to NPC 21-015	MVC, et al. v. DSL Tags: Compliance with a Legal Obligation (Section 12 (c)), Jurisdiction, Motion for Reconsideration, Unauthorized Disclosure (Section 32)
NPC 21-167	MAF v. Shopee Philippines, Inc. Tags: Unauthorized Purposes (Section 28), Unauthorized Disclosure (Section 32), Proportionality, Principle of Accountability, Personal Information Processor, Legitimate Interest (Section 12 (f), Nominal Damages
NPC SS 22-001 and NPC SS 22-008	In re: Commission on Elections Tags: Unauthorized Access or Intentional Breach (Section 29), Sua Sponte Investigation, Breach Notification, Burden of Proof, Principle of Accountability, Security of Personal Information, Personal Information Controller, Personal Information Processor, Substantial Evidence, Concealment of Security Breaches Involving Sensitive Personal Information (Section 30); Scope of the DPA (Section 4); Sensitive Personal Information
NPC 19-030 and NPC 19-132	CL vs. DDZ and DM vs. DDZ Tags: Exhaustion of Remedies (Sec. 4 NPC Circular No. 16-04) ; Legitimate Interest ; Unauthorized Access or Intentional Breach (Section 29)
NPC 18-205	In Re: Medicard Philippines, Inc Tags: Compliance with the NPC Circular 16-03 (Personal Data Breach Management)
NPC SS 21-005	In Re: Oriente Express Techsystem Corporations (CASHALO) and its Responsible Officers Tags: Failure to substantiate allegations, transparency, legitimate purpose, proportionality, Unauthorized processing of personal information and sensitive personal information, Guidelines on the processing of personal data for loan-related transactions
NPC 18-142	MSH vs. RSF & TCC Tags: Indemnification, Right to rectification
NPC 19-278	JRO vs. MSMI Tags: Exception to the exhaustion of administrative remedies, Legitimate interest, Criteria for lawful processing of personal information
NPC SS 21-006	Wefund Lending Corp. Tags: Unauthorized Processing (Section 25), Legitimate interest (Section 12 f)), Extent of Liability (Section 34), Substantial Evidence, Gross Negligence, Sua Sponte Investigation, Temporary Ban, Legitimate Purpose, Proportionality, Transparency
NPC 21-096	AC v. ISG Tags: Outright Dismissal, Legitimate Purpose, Proportionality, CCTV Guidelines, Form and Content of the Complaint
NPC 21-064	GSS v Global Dominion Financing Inc. Tags: Outright Dismissal, Exhaustion of Remedies
NPC 19-465	GJJ v. Easy Peso Tags: Burden of proof, Electronic Evidence, Unauthorized Processing (Section 25), Contract of Adhesion
NPC 21-016	EDF v. BPI Tags: Burden of proof, Substantial Evidence
NPC 21-031	JCB v. FRL Tags: Exhaustion of remedies, Form and contents of the Complaint, Outright Dismissal, Defense of Legal Claims (Section 13 (f)), Malicious Disclosure (Section 31), Unauthorized Disclosure (Section 32)
NPC 21-032	JDB v. JME Tags: Exhaustion of remedies, Form and contents of the Complaint, Outright Dismissal, Defense of Legal Claims (Section 13 (f)), Malicious Disclosure (Section 31), Unauthorized Disclosure (Section 32)
NPC 19-142	MLF v. Grab Philippines Tags: Outright dismissal, Unauthorized Purposes (Section 28)
NPC CN 19-501	MEC vs. Robocash Finance Corporation Tags: Exception to the Exhaustion of Remedies; Failure to substantiate allegations; Substantial evidence.
NPC CN 19-187	JGO vs. Fynamics Lending, Inc (Pondo Peso) Tags: Quitclaim.
CID 18-D-009	JLB vs. Security Bank Corporation Tags: Substantial Evidence; Burden of proof and burden of evidence; Unauthorized Disclosure; Combination or Series of Acts; Security of Personal Information; Subcontract of Personal Information.
NPC 19-569	MPM vs. U-Peso.Ph Lending Corporation (Pera4U) Tags: Failure to substantiate allegations; Temporary Ban on Processing Personal Data.
NPC 18-074	ECV vs. CVF Tags: Exhaustion of Remedies, Unauthorized Processing of Sensitive Personal Information.
NPC 19-0048	GJ s. VMJ & MTP Tags: Exhaustion of Remedies, Burden of Proof, Legitimate Interest.
NPC 21-086	RTB v. East West Banking Corporation Tags: Fulfillment of a Contract (Section 12 (b))
NPC 19-134	VVC v. CJB Tags: Exhaustion of remedies, Consent, Contract of Adhesion, Unauthorized Processing (Section 25), Unauthorized Disclosure (Section 32)
NPC 18-109	ACN v DT Tags: Intentional breach/Unauthorized access, Lawful Criteria for Processing, Malicious Disclosure
CID 18-D-012	JBD vs. JI and VVV Tags: Unauthorized Processing (Section 25)
NPC 18-010	RLA V. PLDT Enterprise Tags: Personal Information Controller; Personal Information Processor; consent; legal obligation; good faith; processing for unauthorized purposes; unauthorized disclosure; gross negligence.
12-17-2020	FAT vs. XXX Tags: Exhaustion of remedies, Unauthorized disclosure of personal information, Rendition of Decision, Outright Dismissal.
19-653	BGM vs. IPP Tags: Data subject’s right to access, criteria for lawful processing of personal information, legitimate interest, purpose, and proportionality, DPA should not be seen as curtailing the practice of law in litigation, restitution for the aggrieved party, and nominal damages.
NPC 19-910	IN RE: FLI OPERATING ABC ONLINE LENDING APPLICATION Tags: Transparency, Proportionality, Online Lending Application, Sua Sponte Investigation, Unauthorized Processing (Section 25), Incurring Criminal Liability, Consent, Retention of Personal Data, Personal Information Controller, Principle of Accountability, Processing for Unauthorized Purposes (Section 28), Extent of Liability (Section 34), Gross Negligence
NPC 19-621	AMP v. Hupan Lending Technology (Cash Me) Tags: Transparency, Online Lending Application, Substantial Evidence, Temporary Ban, Consent
11-19-2020	SCM vs. XXX Tags: Data privacy rights, Section (4) of the Data Privacy Act, unlawful processing, General Data Principles, privacy policy.
NPC 19-528	MNLC vs PXXX Corporation Tags: Proportionality, Jurisdiction, Exhaustion of Remedies, Consent, Legitimate Interest (Section 12 (f)), Unauthorized Processing (Section 25), Extent of Liability (Section 34), Nominal Damages
09-21-2020	CBI vs. XXX Tags: Burden of Evidence, Burden of Proof, Substantial Proof, Compliance to DPA, Rendition of Decision
07-23-2020	ECA vs. XXX Tags: Right to Data Privacy, Criteria for Lawful Processing of Personal Information, Appointing a DPO, Award, Nominal Damages, Principle of Transparency, Rendition of Decision, Unauthorized Processing
CID 17-005a	ECB vs. SSMSM Tags: Disclosure of the detailed record of calls to a certain mobile user.
NPC 19-1221	RABD v FXXX Tags: Online Lending Application, Sua Sponte Investigation, Substantial Evidence
NPC 19-1222	RBD vs. FCASH GLOBAL LENDING, INC. (FAST CASH) Tags: Online Lending Application, Sua Sponte Investigation, Substantial Evidence
06-18-2020	JGO vs. XXX Tags: Amicable settlement, Quitclaim .
NPC 18-141	MHH v VCF SPFS Tags: Substantial Evidence, Intent to Process
NPC 19-450	JRG v CXXX Tags: Transparency, Substantial Evidence, Temporary Ban, Consent
NPC 19-498	JVA vs. U-PESO.PH LENDING CORPORATION (UPESO) Tags: Transparency Online Lending Application, Jurisdiction, Consent, Substantial Evidence, Temporary Ban
06-09-2020	BEM vs. GFC Tags: substantial evidence, quantum of proof required, rendition of decision
NPC 18-152	MRS vs. NATIONAL CONCILIATION AND MEDIATION BOARD (NCMB) AND DEPARTMENT OF LABOR AND EMPLOYMENT (DOLE) Tags: Exhaustion of remedies
NPC 18-155	HNT vs. EASTWEST BANK Tags: Alternative Dispute Resolution
NPC 18-066	B.Q.N. vs NUQ Inc Tags: Not all processing and disclosure of personal information are violations of the DPA, criteria for lawful processing, processing of personal information shall be permitted only if not otherwise prohibited by law, processing of information is permissible if the processing is necessary for compliance with a legal obligation to which the personal information controller is subject, principles of transparency, legitimate purpose, and proportionality
CID 18-E-040	KGR v. BB et al. Tags: Personal Information Controller, General Data Privacy Principles, Processing, Substantial Evidence
NPC 17-015	ID Y.S. v DS BANK Tags: Personal Data Breach Management, Who may file a complaint, Rights of Data Subjects
CID 17-K-003	KRL vs. TRINITY UNIVERSITY OF ASIA, AA, MC, NCB, RG GV, GCT, RR, MR, PB Tags: Exhaustion of Remedies, Alternative Dispute Resolution, Privacy Impact Assessment, Accessing Due to Negligence (Section 26), Defense of Legal Claims (Section 13(f)) , Substantial Evidence
CID 18-F-064	RBG vs. CB Tags: Substantial Evidence
08-15-2019	In Re: DATA BREACH INVOLVING THE COMELEC DATA PROCESSING SYSTEM IN WAO, LANAO DEL SUR Tags: Safekeeping, Concealment of Data Breach, Documentation
NPC 17-047	JV vs. JR Tags: Form and contents of the Complaint, Outright Dismissal
NPC 17-018	EA and TA v EJ Tags: Legitimate purpose, Proportionality, Unauthorized Processing (Section 25), Processing, Defense of Legal Claims (Section 13 (f))
	IBC vs. PBI Tags: Lawful Processing of Personal Information, Phishing, Right to Rectification, Right to Correct Personal Information

DECISIONS

REPUBLIC OF THE PHILIPPINES

ABOUT GOVPH

GOVERNMENT LINKS

NPC PRIVACY NOTICE