Who may file a complaint?
1. The person claiming to be the subject of the privacy breach/violation;
2. His or her authorized representative; or
3. the National Privacy Commission (NPC), on its own initiative
(Sec. 3, NPC Rules)
Can someone not personally affected, and likewise not an authorized representative, file a complaint?
No. However, he or she may opt for either of the following:
1. Request for an advisory opinion; or
2. Inform the NPC on the data privacy concern
(Sec. 3, NPC Rules)
Will filing a complaint or requesting an advisory opinion require the payment of fees?
Yes. Otherwise, it will not be entertained. (Sec. 5, NPC Rules)
Is the rule on filing fees absolute?
No. The following instances are the exceptions to the rule on filing fees:
1. The complainant is the government, or any agency or instrumentality thereof, including government-owned and controlled corporations (excluding, however, GOCCS incorporated under the Corporation Code);
2. The complainant is an indigent or pauper litigant under the Rules of Court, i.e. one who has no money or property sufficient and available for food, shelter, and basic necessities for himself and his family (Sec. 21, Rule 3, Rules of Court); or one whose gross income and that of his immediate family do not exceed an amount double the monthly minimum wage of an employee (Sec. 19, Rule 141, Rules of Court) and do not own real property with fair market value exceeding PhP 300,000.00.
3. NPC waives the requirement for good cause shown.
Where should the complaint be filed?
The complaint can be filed with any office of the NPC (Sec. 7, NPC Rules). Note that the Rules are permissive as to which office the same can be filed and does not limit the filing of the same to the
office located in the same locality/region as that of the residence of the complainant. Note, also, that while “any office” is mentioned, at present, the NPC has only one existing office, located in Quezon City. Nonetheless, electronic filing is allowed via e-mail to
complaints@privacy.gov.ph, with a copy furnished to all other parties to the complaint (Sec. 8, NPC Rules).
What shall be the form and contents of the complaint?
It shall be in writing, verified and under oath, or contained in a sworn affidavit. The Efficient Use of Paper Rule must be complied with. In addition, the following shall be included:
* a brief narration of the material facts;
* supporting documents (original or certified true copy) and testimonial evidence;
* specific violation of the Data Privacy Act or related issuances;
* particular acts or omissions amounting to the alleged data privacy violations; and
* any and all correspondence with the respondent on the matter complained of, including a statement of the action taken by the latter to address
the matter, if any.
(Sec. 10, NPC Rules)
What will happen next upon filing the complaint?
The case will be assigned by the NPC to an investigating officer for evaluation. Said officer will then recommend any of the following:
1. outright dismissal,
2. referral to the respondent for comment,
3. further monitoring,
4. that the complaint be treated as a request for an advisory opinion, or
5. indorsement to the proper government agency.
(Sec. 11, NPC Rules)
If the allegations are deemed to be sufficient, the investigating officer shall issue an Order to Confer for Discovery within 10 days from receipt of said Order. Whatever is agreed upon during such conference shall then be reduced into a Discovery Conference Report to be submitted to the NPC within five days from conclusion of the conference. (Sec. 13, NPC Rules)
Thereafter, the respondent/s will be directed, via an Order, to submit a Comment to the Complaint within 10 days from receipt of said Order. (Sec. 15, NPC Rules)
If the investigating officer deems it necessary, he or she may then require the complainant to file a Reply within 10 days, and the respondent, a Rejoinder, also within 10 days. (Sec. 15, NPC Rules)
The investigating officer will then proceed to investigate the circumstances surrounding the alleged privacy violation (Sec. 16, NPC Rules) and, thereafter, submit a fact-finding report, with corresponding recommendations, to the Office of the Commissioner (Sec. 18, NPC Rules).
The NPC will review the evidence presented, together with the fact-finding report. It may either:
1. promulgate a Decision; or
2. order the conduct of a clarificatory hearing.
The Decision may include enforcement orders. (Sec. 21 & 22, NPC Rules)
Is the Decision of the NPC appealable?
Yes. The party adversely affected may file an appeal within 15 days from receipt of a copy of the Decision. Otherwise, the same will become final and executory. (Sec. 30, NPC Rules)
We are pleased to announce that