NPC investigates PhilHealth for data breach liability

PhilHealth may face liability for a data breach involving 734GB of personal information under both the Cybercrime Prevention Act and the Data Privacy Act.

The National Privacy Commission is investigating PhilHealth officials' accountability, focusing on possible negligence due to expired antivirus software.

NPC plans to identify responsible officials and recommend legal prosecution if evidence of concealment or negligence is found.

Under NPC guidelines, administrative fines up to P5 million may be imposed depending on the investigation's outcome.