People whose personal information are collected, stored and processed are called data subjects. Under RA 10173, they are accorded certain rights which they may invoke and enforce against personal information controllers or processors, and which the latter are duty-bound to observe and respect.
Continue readingIMPLEMENTING RULES AND REGULATIONS OF REPUBLIC ACT NO.10173, KNOWN AS THE “DATA PRIVACY ACT OF 2012” Pursuant to the mandate of the National Privacy Commission to administer and implement the provisions of the Data Privacy Act of 2012, and to monitor and ensure compliance of the country with international standards set for data protection, the following rules and regulations are hereby promulgated to effectively implement the provisions of the Act:
Continue reading