Probe to determine if Cebuana Lhuillier had been negligent —NPC exec
Privacy Commissioner Raymund Liboro on Monday said part of their investigation into the data breach that was reported by Cebuana Lhuillier is if there is negligence on the part of the pawning and remittance firm.
"Opo, titignan natin 'yan," Liboro said in an interview on Dobol B sa News TV when asked if they will look into possible negligence as cause of the data breach. "'Yan ho ang isa sa pinakaimportanteng malaman dito."
Liboro: Titingnan natin 'yan (liability of Cebuana). Isa 'yan sa importanteng malaman dito. Diyan nananagot ang ating mga kumpanya ayon sa mga batas natin ngayon.
— DZBB Super Radyo (@dzbb) January 20, 2019
Cebuana Lhuillier has sought the help of the National Privacy Commission (NPC) after it detected unauthorized downloading in one of its email servers. It said around 900,000 clients' personal information — including name, birth date, email address, mobile number and in some cases, income information — may have been exposed in the incident.
Liboro said under the law, the protection of a citizen's personal information lies on the shoulder of the party processing the information.
"Under sa batas ngayon, ang papangutan ay malaki na nasa balikat ng mga nagpoproseso ng impormasyon," he said, adding, "Unauthorized access through negligence ay malaki ang penalty kung mapapatunayan."
Liboro said they asked Cebuana Lhuillier to submit a comprehensive report on the incident, which supposedly took place in August last year but was only detected recently.
"Minsan ganyan bago ma-detect inaabot ng konting panahon," the NPC official said. "May mga ganyang kaso sa buong mundo na hindi agad-agad malalaman."
Liboro said the report they asked from Cebuana Lhuillier should include the possible risks their customers may face as a result of the data breach, and how the company will address it.
"'Yung lawak (ng data breach) at epekto sa kustomers ay di pa malinaw sa amin," he said. "Malalaman po natin 'yan sa kanilang paglalahad. Dapat sasabihin nila kung ano ang risko na kinakaharap ng mga tao at kung paano ito masosolusyunan." —KBK, GMA News