NPC probing possible voters’ data breach

MANILA — The National Privacy Commission (NPC) is looking into social media reports alleging that some candidates running for the midterm elections were able to access personal information of voters without their consent.

“It has come to our attention that some individuals posted on social media about receiving from candidate/s a “precinct locator” or “voter’s information” card, printed with their personal data – name, complete residential address, date of birth, among others,” said Privacy Commissioner Raymund Liboro in a statement on Friday.

“Concerns were raised over the possibility that these candidates may be processing voter personal data without authority,” he added.

The NPC seeks to determine how these candidates were able to access voters’ data and whether the processing of election-related information was in compliance with the standards of the Data Privacy Act (DPA).

Liboro reminded political parties and candidates that they must uphold the data subject rights of voters at all times in line with their capacity as personal information controllers.

“They have the obligation to ensure that all personal data processing related to any of their partisan political activity satisfy the criteria for lawful processing as provided for in the DPA,” he stated.

Failure to uphold data subject rights in processing voter information may subject political parties and candidates to penalties for possible violations of the data privacy law.