NPC probing government data leaks

MANILA, Philippines — The National Privacy Commission (NPC) is investigating reports of data leaks involving several government agencies.

NPC Deputy Privacy Commissioner Jose Belarmino II said the commission is verifying the incidents and determining whether personal information has been compromised.

“The Commission will coordinate directly with the government agencies identified in these reports to verify the alleged incidents, ascertain the circumstances surrounding them and determine whether personal data have been compromised,” he said.

Belarmino said the concerned agencies must submit the necessary reports in compliance with Republic Act 10173, or the Data Privacy Act, if warranted.

The NPC has yet to receive personal data breach notifications from the concerned government institutions. Among the agencies reportedly affected by a data breach is the Bureau of Internal Revenue.

Under NPC Circular 16-03, personal information controllers are required to notify the commission and affected data subjects within 72 hours of learning that a data breach has occurred.

Should the reported incidents be confirmed and meet the requirements for mandatory notification, the concerned agencies must submit the prescribed breach notifications.

“The NPC will continue to monitor developments and take appropriate regulatory action, as warranted, to ensure the protection of personal data and uphold the rights of data subjects,” Belarmino said.

Fake account

Meanwhile, the Philippine National Police is investigating a fraudulent Facebook account using the photograph of PNP chief Gen. Jose Melencio Nartatez Jr.

The PNP vowed yesterday to pursue appropriate action against those responsible for the unauthorized use of Nartatez’s name and photograph.

It warned the public against engaging with the account operating under the name Jose Melencio Corpus, stressing that it has no connection with the police chief.

Netizens were advised to exercise caution, particularly if the account requests money, personal information or favors.

“The PNP emphasizes that any messages, instructions, requests or transactions made through the said account are unauthorized and must not be treated as official PNP communications,” the PNP said in a statement.

Those who received messages from the bogus account were advised to take screenshots as evidence that could be used by the PNP Anti-Cybercrime Group in its investigation.

Fake news

In a separate case involving alleged online disinformation, Ombudsman Jesus Crispin Remulla said he would file complaints against vloggers and Facebook pages spreading false information about his health and his office to undermine public confidence.

During a press briefing on Nov. 6, Remulla said he would file complaints with the Department of Information and Communications Technology and Facebook, seeking the removal of accounts spreading false information for propaganda purposes.

“People are trying to create doubt about the office or maybe even the state of my health and I think this has to stop. Obviously, it’s meant to influence people so they will have doubts about this government and this office,” he said.

Remulla said he learned about the false reports concerning his health after media friends expressed concern and told him they were praying for him. He clarified that he had been cancer-free for three years. — Daphne Galvez