The National Privacy Commission (NPC) said Thursday it is taking a pro-active stance on reports of data breaches in Robinsons Land Corp. and Toyota Motor Philippines.
It said in a statement it began analyzing data from the two companies to determine the cause and scope of the breaches.
“Robinsons Land notified us of a data breach on June 1, 2024. Additionally, Toyota notified us of a breach on May 14, 2024. The reports are currently under evaluation,” said NPC compliance and monitoring division chief Rainier Anthony Milanes.
He said the investigation could involve requesting additional information from the companies or even forensic analysis of their systems.
The NPC gave Robinsons Land and Toyota 72 hours to report additional information that may help the investigation.
It said it may issue corrective orders to the companies, requiring them to improve their data security practices to prevent future breaches.
The NPC said that in cases of severe violations, it may impose fines or penalties on the companies.
“We encourage data subjects who believe they may be part of any breach to contact the data protection officers of the respective companies and report the same to the NPC,” Milanes aid.
Meanwhile, the Philippine National Police (PNP) also reported six data breach notifications in May 2024.
The NPC also said there was no official notification of any data breach involving S&R.