Photo courtesy of NPC

The National Privacy Commission (NPC) conducted an on-the-spot privacy sweep and compliance check at independent retail and service stores, boutiques, pop-up booths, kiosks, and stalls within Ayala Malls Manila Bay. The objective was to assess their compliance with the Data Privacy Act of 2012 (DPA) and other NPC regulations.

Led by Privacy Commissioner Atty. John Henry Naga, the sweep involved examining both physical and digital data processing systems, including logbooks, raffle coupons, brochures, and posters.

This initiative aims to ensure personal information controllers (PICs) and processors (PIPs) comply with their legal obligations under the DPA and its Implementing Rules and Regulations (IRR).

Commissioner Naga highlighted the significance of these checks for protecting customer data and maintaining trust. He warned that non-compliant entities could face administrative fines. Data Security Director Atty. Aubin Arn Nieva and Compliance Division Chief Atty. Rainier Anthony Milanes was also present to provide guidance.

Following the sweep, the NPC will assess findings and require corrective actions for any deficiencies identified. A Certificate of No Significant Findings will be issued to compliant entities.

The NPC also set up an information booth at the mall to raise data privacy awareness and provide compliance guidance.