Resolution Text
CBI ,
Complainant,
-versus -
XXX ,
Respondents.
CID No. 17K-004
For: Violationofthe Data
Privacy Act
x--------------------------------------------------x
NAGA , D.P.C .:
Thisreferstothe Compliance Letterdated 02 December 2020,
withanattached XXX Cards Complaint Management Process
submittedbythe XXXinrelationtothe 21 September 2020 Orderof
this Commission .
Facts
On 21 September 2020, the Commissionissueda Resolution
disposing, thus:
WHEREFORE ,premisesconsidered, this Commissionhereby DENIES Complainant CBI’s Urgent Motionfor Reconsideration. Furthermore, thecaseof CBI vs. XXXisherebyconsidered CLOSED . Furthermore, XXX is ORDEREDtosubmitwithinthirty (30) daysfrom receiptofthis Decisionacompletereportonthemeasures ithasundertakenorwillundertaketoaddresstheissueof delayedresponsetotheircustomers’ requestinrelationto theirrightsasdatasubjects.
Respondentmanifestedthattheyreceivedthe
abovementioned Resolutionon 04 November 2020. Thus, on 02
December 2020, XXXsubmittedits Compliancewithanattached CID No. 17K-004
Page 2of 3
XXX Cards Complaint Management Processas Annex 1ofthe
Compliance. The Annex 1providesthestepbystepprocessinthe
handlingofcomplaintsfromtheirclients . The Respondentalso
indicatedthereinturnaroundtimeofseven (7) daysforsimple
complaintsandfortyfive (45) forcomplexcomplaints.
Discussion
The Commissionfinds XXXsubmissiontobesubstantially
compliantwiththe 21 September 2020 Orderofthis Commission.
The 21 September 2020 Orderwasbasedontheinactionof
the Respondenttotherequestforcorrectionofthe Complainant .
Suchrequestshouldbeacteduponwithreasonableturnaround
timeconsideringthattherequestisoneoftherightsprovidedinthe
Data Privacy Act (DPA) toeverydatasubject 1. Further, this
obligationisinrelationto Section 28 (d) ofthe Implementing Rules and Regulationsofthe DPA.
Whilethe Commissionopinesthatthe Complaint
Management Processofthe Respondenthereincanbewrittenina
morecomprehensiveanddetailedmanner, wefinditto
substantiallycomplywiththerequirementsoftheabovementioned
provisionsofthe DPA , its IRR , andwiththe Commission’s 21
September 2020 Order. Asjurisprudenceprovides, thesubstantial
complianceruleisdefinedas , “compliancewiththeessential
requirements, whetherofacontractorofastatute. ”2
WHEREFORE, premisesconsidered, this Commissionhereby
NOTESthesubmissionmadebythe XXXdated 02 December 2020
incompliancewiththe Commission Orderdated 21 September
SO ORDERED.
Pasay City, Philippines ;
17 December 2020.
Page 3of 3
JOHN HENRY D. NAGA
Deputy Privacy Commissioner
WE CONCUR:
RAYMUND ENRIQUEZ LIBORO
Privacy Commissioner
LEANDRO ANGELO Y. AGUIRRE
Deputy Privacy Commissioner
COPY FURNISHED:
CBI
Complainant
XXX
Respondent
COMPLAINTS AND INVESTIGATION DIVISION
ENFORCEMENT DIVISION
GENERAL RECORDS UNIT