Professional Documents
Culture Documents
SECTION 51. Accountability for Violation of the Act, These Rules and
Other Issuances of the Commission. —
a. Any natural or juridical person, or other body involved in the
processing of personal data, who fails to comply with the Act,
these Rules, and other issuances of the Commission, shall be
liable for such violation, and shall be subject to its corresponding
sanction, penalty, or fine, without prejudice to any civil or
criminal liability, as may be applicable.
b. In cases where a data subject files a complaint for violation of his
or her rights as data subject, and for any injury suffered as a
result of the processing of his or her personal data, the
Commission may award indemnity on the basis of the applicable
provisions of the New Civil Code.
c. In case of criminal acts and their corresponding personal
penalties, the person who committed the unlawful act or omission
CD Technologies Asia, Inc. © 2021 cdasiaonline.com
shall be recommended for prosecution by the Commission based
on substantial evidence. If the offender is a corporation,
partnership, or any juridical person, the responsible officers, as
the case may be, who participated in, or by their gross
negligence, allowed the commission of the crime, shall be
recommended for prosecution by the Commission based on
substantial evidence.
RULE XIII
Penalties
SECTION 52. Unauthorized Processing of Personal Information and
Sensitive Personal Information. —
a. A penalty of imprisonment ranging from one (1) year to three (3)
years and a fine of not less than Five hundred thousand pesos
(Php500,000.00) but not more than Two million pesos
(Php2,000,000.00) shall be imposed on persons who process
personal information without the consent of the data subject, or
without being authorized under the Act or any existing law.