Privacy Highlight
Mandatory Registration with the National Privacy Commission
The National Privacy Commission (NPC) warns that it will issue show cause orders to businesses that process personal data of clients and/or employees but are unregistered with the NPC.
​
NPC Circular No. 2022-04 mandates the registration of data processing systems (DPS) and data protection officers (DPOs) for all businesses that:
​
1. Process personal data of:
a) 250 or more employees; or
b) 1,000 or more customers;
2. Or process data that will likely pose a risk to the rights and freedoms of data subjects.
​
Those covered by this mandatory registration and fail to comply with the same shall be subject to the corresponding fine in accordance with the NPC’s Guidelines on Administrative Fines (NPC Circular No. 2022-01).
