MANILA – The National Privacy Commission (NPC) have begun “on-set compliance check visits” on institutions in each personal and public sectors to make sure their compliance with the Data Privacy Act of 2012 (DPA).
In an announcement Wednesday, the NPC stated the on-site visits started in March to find out whether or not private info controllers (PIC) and private info processors (PIP) “can demonstrate organizational commitment, program controls, and review mechanisms” to guarantee privacy and data safety.
These PICs and PIPs embody institutions in numerous industries and sectors together with media entities, resorts, courier providers, colleges, authorities entities, and native authorities items.
“On-site visits, along with privacy sweeps and the submission of relevant documents, are aligned with NPC Circular No. 18-02 providing the guidelines on the conduct of compliance checks,” the NPC stated.
During an on-site go to, approved NPC personnel will conduct a focused inspection of the PIC or PIP’s premises resembling presentation of related paperwork or data, group inspection to chose related departments, and interview.
“Upon the conclusion of the on-site visit, the NPC personnel will present their findings and determine whether the PIC or PIP has deficiencies that needed to be addressed,” the NPC stated.
In case of a deficiency, the PICs or PIPs will ship a dedication letter to the NPC expressing their intention to conform inside a timeline.
“If such deficiencies had been adequately addressed or if the findings exhibit no substantial deficiencies, the NPC shall issue a Certificate of No Significant Findings in favor of the PIC or PIP,” the NPC stated.
Privacy Commissioner John Henry Naga stated these on-site visits are alternatives for PICs and PIPs to have the NPC information them with “effective compliance with the DPA and prevent mishandling of personal data.”
“We, at the NPC, firmly believe that PICs and PIPs should not only comply and submit documents in accordance with the DPA but must also recognize their vital role in upholding and protecting data subject rights,” Naga stated. (PNA)