In an order dated October 29, the data privacy agency threatened to prosecute local officials of the airline for their apparent failure to notify timely the NPC on the occurrence of the data breach.
The Philippines has earned a voting seat in the five-member executive committee of the International Conference of Data Protection and Privacy Commissioners (ICDPPC), a worldwide conference of 119 independent regulators from all over the globe.
The NPC directed Facebook to implement identity theft insurance or credit monitoring service for free to affected Filipino users or establish a dedicated helpdesk to provide assistance in identity restoration and other related matters.
The National Privacy Commission said in a statement on Saturday, September 29, that it has already communicated with social media giant Facebook regarding the hacking incident that is said to have affected about 50 million accounts.
The PhilSys Act seeks to implement a single official identification card for all citizens and foreign residents that would serve as a de facto national identification number.
Companies which collect personal information from customers such as banks should disclose certain things either before data gathering or within a reasonable period after.
The government will launch a synchronized effort to promptly deal with consumer complaints on telco services such as those involving data privacy violations, text scams, vanishing load, unauthorized charges, defective product, and denial of subscription plan activation.
The National Privacy Commission has ordered Jollibee to suspend the operations of its online delivery site and all other websites open to the public after the fastfood giant submitted a data breach report last December 12, 2017.
The National Privacy Commission (NPC) has posted on its website a formal order, dated May 2, obliging Wendy's Philippines to promptly notify data subjects affected in the breach and wholesale leak of its database last April 23.