New Data Privacy Act to boost IT-BPO sector

MANILA, Philippines - The newly signed Data Privacy Act is expected to further boost the attractiveness of the Philippines as an investment site for the information technology- business process outsourcing (IT-BPO) sector.

Louis Casambre, executive director of the Information Communications Technology Office of the Department of Science and Technology (DOST-ICTO), said Republic Act 10173, or the Data Privacy Act of 2012 makes the Philippines compliant with international data security standards.

Casambre said the new law also puts in place measures to protect and preserve the integrity, security and confidentiality of personal data collected by government and private entities in their operations.

“This measure will enable us to replicate our success in call centers in other BPO segments such as healthcare outsourcing and human resource outsourcing, where sensitive data is involved,” the official said.

The DOST lauded the efforts of the Congressional Commission on Science and Technology and Engineering (COMSTE) chaired by Sen. Edgardo Angara and House ICT committee headed by Rep. Dante Tiñga.

“We see this act as keystone legislation that will strengthen our country’s position as a leader in IT-BPO,” Casambre said.

For his part, ICT Industry Development deputy executive director Alejandro Melchor III said the new law signed by President Aquino last Aug. 15 would help sustain the country’s momentum as an emerging global leader for shared services, one of the fastest growing segments of the IT-BPO industry.

“There are indications the market is selecting the Philippines as the preferred destination for this segment,” Melchor said.

The law also creates the National Privacy Commission under the Office of the President that would enforce the law, receive complaints, set investigations and impose requisite sanctions.

The law which is based on standards set by the European Parliament and aligned with the Asia Pacific Economic Cooperation Information Privacy Framework, is intended to protect the integrity and confidentiality of personal data.