The National Privacy Commission (NPC) has released new guidelines on how personal data should be handled during legal proceedings. These guidelines, issued on Aug. 12, 2024, clarify when it’s okay to use sensitive and private information in court cases or when dealing with government agencies.
The Data Privacy Act (DPA) permits using this kind of information if it’s necessary to protect people’s rights in legal matters or to support legal claims. It also applies when this data is shared with government authorities.
“While the protection of personal data is a fundamental right, we recognize that there are instances where processing such data is essential for upholding justice and the rule of law,” said Privacy Commissioner Atty. John Henry Naga. “These guidelines are designed to ensure that personal data is handled responsibly and that the data subject rights are protected throughout the process.”
The new rules connect Section 13(f) of the DPA with another part of the law that deals with “legitimate interest,” meaning it’s now clear when it’s legal to use personal information. According to these new guidelines, those responsible for handling personal data must follow specific rules outlined in a previous advisory, which ensures that the use of personal data is justified and appropriate.
Section 4 of the new guidelines says that when handling personal data, it should be just enough for its intended purpose and not more than necessary, while following the law.
The guidelines also require that people whose data is used in this way are told about it. For example, when they get legal documents with their personal data, they need to be informed about what data is being used, why, and how much.
Overall, these new rules make it clear how personal data should be used in legal situations, aiming to balance the need for justice with protecting privacy.