New privacy commissioner John Henry Naga said the National Privacy Commission (NPC) is investigating whether BDO’s aging IT system had sufficient technical, organizational, and physical safeguards in place to prevent the unauthorized disclosure of personal information.