RICHELLE DIANNE R. PATAWARAN
The Data Privacy Act of 2012 (DPA) prohibits the processing of “personal information” except when certain conditions exist. Thus, personal information controllers have been very cautious in releasing information, such as lists of names, etc., in fear of violating this rule. In two recent opinions issued by the National Privacy Commission (NPC), however, we get a view as to how NPC interprets such prohibition with respect to homeowners’ associations and universities.