The National Privacy Commission (NPC) is urging the public to be cautious after reports surfaced about individuals in Bulacan undergoing iris scans in exchange for cryptocurrency. The NPC clarified that it does not authorize or approve any activities that collect or process personal data, including biometric information, for such purposes.
“Iris scans are considered sensitive personal information under the Data Privacy Act of 2012. If misused or stolen, they can lead to identity theft and fraud,” the NPC stated.
The agency advised individuals to be extra careful before allowing anyone to collect their biometric data. It emphasized the importance of verifying whether the entity collecting personal information is registered with the NPC and understanding how the data will be used, stored, and protected.
The NPC is monitoring reports of iris scanning in exchange for cryptocurrency to ensure compliance with the law. It also clarified that while it issues Certificates of Registration to personal information controllers and processors, this does not mean it endorses their activities.
“Registration with the NPC does not automatically mean approval of data processing activities. Individuals should always assess the risks before sharing their personal information,” the commission added.
The NPC urged the public to report any suspected misuse of personal data to its Quick Response Team at sprint@privacy.gov.ph.