The National Privacy Commission is set to impose administrative fines on data privacy violations by personal information controllers or processors from the private sector.
The NPC presented the draft circular on the guidelines on administrative fines to concerned organizations and stakeholders in an online public consultation on April 30, 2021. The commission made it clear that the proposed fines were separate from the criminal penalties provided under the Data Privacy Act and its implementing rules and regulations.
Along with the University of the Philippines Law Center and an expert from the UP School of Economics, the NPC studied and adopted an economic analysis of law to come up with a range of fines that provides the proper deterrent effect to companies while also ensuring free flow of information to promote innovation and growth.
Depending on the infraction committed, the draft circular proposes fines ranging between 0.5 percent to 5 percent of the annual gross income of the personal information controller or processor handling the personal data.