NPC issues rules governing personal data protection, certifi...

THE National Privacy Commission (NPC) said it issued two circulars outlining the tasks of data handling personnel and laying down the rules governing certification of organizations deemed compliant with data-handling rules. In a statement on Monday, the regulator said NPC Circular 2023-06, or the Security of Personal Data in the Government and Private Sector, took effect on March 30, while NPC Circular 2023-05 or the Prerequisites for the Philippine Privacy Mark Certification Program took effect on March 15. In the circular implemented last week, the NPC set the general obligations of personal information controllers (PICs) and personal information processors (PIPs). These requirements include the designation of a data protection officer, the registration of data processing systems, the conduct of privacy impact assessments, the implementation of privacy management programs, the train...