NPC sets admin fines vs data privacy infractions

The National Privacy Commission (NPC) will impose administrative fines ranging from a low of 0.25 percent to three percent of the annual gross income of the personal information controllers (PICs) and personal information processors (PIPS) that committed data privacy infractions. This is contained in NPC Circular No. 2022-01 on the Guidelines on Administrative Fines recognizes that it is essential for the public interest to impose administrative fines that are proportionate and dissuasive of data privacy infractions. NPC said that the administrative fines range from 0.5% to 3% and 0.25% to 2%, respectively, of the annual gross income of the PIC or PIP will depend on whether the violation is grace or major. As for other violations, the PIC or PIP shall be subject to an administrative fine of not less than P50,000.00, but not exceeding P 200,000.00 for either of the following: (1) failu...