National Privacy Commission(NPC)

Note: the data subject was not informed of this disclosure nor has she consented to any processing.  Is this not evidence of unauthorized disclosure at the highest level at the BI? ISO/IEC 27002 was/is the minimum reqd by the NPC, does it now believe the BI to be not complaint with the said intl standard? The BI Solicitor General insist that there was no evidence of a breach of personal information, and yet we have the Commissioner's letter. Is this enough for NPC to conduct an audit of the BI? Other's efforts can give the NPC it's fangs,how to use it? It must always be decisively. Good luck.

October 26, 2020

Dear Carlos,

Thank you for your request dated Feb 28, 2019 under Executive Order No. 2 (s. 2016) on Freedom of Information in the Executive Branch, for Unauthorized disclosure CID Case 18-G-082.

We received your request on Feb 28, 2019 and will respond on or before Mar 21, 2019 11:09:06 PM, in accordance with the Executive Order's implementing rules and regulations.

Should you have any questions regarding your request, kindly contact me using the reply function on the eFOI portal at https://www.foi.gov.ph/requests/aglzfmVmb2ktcGhyHQsSB0NvbnRlbnQiEE5QQy04NTIxMzgwODA1NDQM, for request with ticket number #NPC-852138080544.

Thank you.

Respectfully,

Roren Marie Chin
FOI Officer

October 26, 2020

Dear Carlos Beltran,

Greetings!

Thank you for your request dated Feb 28, 2019 11:09:06 PM under Executive Order No. 2 (s. 2016) on Freedom of Information in the Executive Branch.

Your request

You asked for Unauthorized disclosure CID Case 18-G-082.

Response to Request

While our aim is to provide information whenever possible, in this instance the Commission does not have the information you requested. However, if you want to request for clarification on matters relating to data privacy or data protection, we can provide through an issuance of Advisory Opinion.  Kindly write a letter request to our Privacy Policy Office via [email protected] with the following information indicated: 
 
a. Name and e-mail address; 
 
b. Novel issues, questions of law or matters and other legitimate concerns sought to be clarified or confirmed by the requesting party; 
 
c. A comprehensive narrative of the factual circumstances and legal bases of the request; 
 
d. An affidavit or certification that the subject of the request for advisory opinion is not a matter pending in a case in litigation before the courts, the NPC or is not subject of an ongoing investigation or compliance check;  

Your right to request a review

If you are unhappy with this response to your FOI request, you may ask us to carry out an internal review of the response, by writing to Privacy Commissioner and Chairman Raymund E. Liboro at [email protected]. Your review request should explain why you are dissatisfied with this response, and should be made within 15 calendar days from the date when you received this letter. We will complete the review and tell you the result, within 30 calendar days from the date when we receive your review request.

If you are not satisfied with result of the review, you then have the right to seek the appropriate judicial remedy before the courts.

Thank you.

Respectfully,

FOI Decision Maker