On 1 March 2021, the Philippine National Privacy Commission (NPC) announced its new online registration and renewal platform called “eRehistro,” which can be used by Personal Information Controllers (PICs) and Personal Information Processors (PIPs) to register, amend or renew their Data Protection Officer (DPO) and Data Processing Systems (DPS) registrations.1
In addition, the NPC extended the validity of existing DPO registrations, from 7 March 2021 to 30 June 2021, in order to give way to the launch of the eRehistro platform. According to the NPC, this extension is also meant to give PICs and PIPs ample time to prepare for the creation of their eRehistro accounts as it will now include both Phase 1: DPO and Phase 2: DPS of the registration process.
Although the NPC has yet to issue its formal guidelines with respect to the eRehistro platform, clients are advised to prepare, review and update their compliance and registration information in preparation for both the renewal of existing DPO registrations and the registration of their DPS with the NPC. In addition to preparing for the NPC’s online registration system, the internal review and updating of DPO and DPS information will ensure compliance with the requirements of the Data Privacy Act of 2012 and its Implementing Rules and Regulations, including the designation of accountable individual(s) who will ensure the company’s compliance with the said law and the maintenance of records of data processing systems.
Clients are likewise encouraged to stay tuned to further updates from the NPC, especially with regard to the eRehistro platform. Our Firm is closely monitoring developments on this important compliance matter and will provide more updates as soon as they arise.
1 Registration with the NPC is required for PICs and PIPs processing personal data and operating within the Philippines under any of the following conditions:
- Processing the sensitive personal information of at least 1,000 individuals
- Employing at least 250 individuals
- Belonging to a business/industry sector identified by the NPC (NPC Circular No. 17-01) as subject to mandatory registration