On 8 August 2022, the Philippines' National Privacy Commission (NPC) adopted the Guidelines on Administrative Fines setting out the administrative fines for which Personal Information Controllers and Personal Information Processors can be made liable for infractions under the Data Privacy Act of 2012. The Guidelines distinguish between Grave, Major, and Other Infractions and set the possible range of the fine for each infraction. The Guidelines also list a number of factors which are to be taken into account when determining the fine, such as intentionality, damage, and duration. The Guidelines will be implemented 15 days after publication in a newspaper of general circulation.
Original source